IRONSCALES Report: AI Agents Are Emerging as a Primary Target for Phishing Attacks

A new threat report from IRONSCALES finds that AI agents are increasingly being targeted by phishing campaigns that exploit their autonomous action-taking capabilities — particularly agents with access to email, calendars, file systems, or payment APIs. The attack vectors identified include prompt injection via malicious email content, credential harvesting through agent-initiated OAuth flows, and social engineering attacks designed to manipulate agent decision logic rather than human users. For developers deploying agents with real-world tool access, the report is a direct call to treat agent endpoints with the same adversarial threat modeling applied to human-facing systems. Key mitigations cited include input sanitization at every tool boundary, scoped permission sets that limit blast radius, and human-in-the-loop checkpoints for irreversible actions. The finding that agents are becoming first-class phishing targets — not just proxies for human targets — marks a significant maturation of the AI security threat landscape.