Phishing 3.0: The Fight Moves to Agent Versus Agent

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message's intent, and it is failing now that the sender is no longer a person. From Bad Content to Bad Intent to AI on Both Sides Phishing 1.0 was bad

The article describes an evolution of phishing from payload-focused attacks (links/attachments) to intent-based social engineering and now to AI-driven scenarios where autonomous or semi-autonomous agents operate on both attacker and defender sides. It explains that traditional email defenses, which focus on static content and obvious indicators, are increasingly ineffective when the malicious behavior is embedded in AI-orchestrated workflows rather than in a single message element. From a RealGround perspective, this represents AI agent abuse risk: adversarial agents can be designed to probe defenses, adapt to filters, and chain multiple tools or services to bypass controls, making attacks more dynamic and harder to detect. Organizations using AI agents for email triage, security automation, or user assistance should harden agent architectures, rigorously test business logic, and continuously red-team AI workflows to detect and mitigate agent-on-agent phishing and escalation paths.