this week microsoft disrupted a phishing operation where ai generated convincing lures at scale, roughly twelve thousand compromised accounts before the takedown. the sobering part is not the count, it is the industrialization: custom lures per victim used to take skill, now it takes a subscription. security awareness training was built for generic bait. we need detection that assumes perfect grammar and perfect context.