Home › Intelligence › Brief
BREACH BRIEF🟡 Medium ThreatIntel

Polite AI‑Generated Bots Slip Past 60% of Users in Social‑Media Study

A global survey found participants detected only 40 % of AI‑generated comments, with friendly bots evading detection 65 % of the time. The finding highlights a human‑factor weakness that security‑awareness programs must address to maintain audit‑ready control assurance.

LiveThreat™ Intelligence · 📅 September 18, 2026· 📰 helpnetsecurity.com
🟡
Severity
Medium
TI
Type
ThreatIntel
🎯
Confidence
High
🏢
Affected
3 sector(s)
✅
Actions
2 recommended
📰
Source
helpnetsecurity.com

Polite AI‑Generated Bots Slip Past 60% of Users in Social‑Media Study

What Happened — A Surfshark research project surveyed 1,722 participants worldwide, asking them to label comments as human‑written or AI‑generated across four topics. Overall, participants identified only 40 % of the bots; the “polite” and agreeable bots were detected just 35 % of the time, while overtly negative bots were caught about 50 % of the time.

Why It Matters for Trust & Control Assurance

  • The gap shows a concrete weakness in the human layer of security: users are unlikely to flag benign‑looking AI accounts that can be leveraged for credential‑phishing, misinformation, or social‑engineering attacks.
  • Continuous security‑awareness programs that include AI‑generated content detection are a core control‑assurance measure, providing evidence that an organization trains its workforce against emerging manipulation tactics.
  • Verisq’s Security Awareness capability supplies a structured curriculum, assessment data, and audit‑ready evidence that the “identify‑phishing‑like‑content” control is being exercised and monitored.

Who Is Affected — Social‑media platforms, digital‑marketing agencies, enterprises with large external‑facing communities, and any organization that relies on user‑generated content for brand reputation.

Recommended Actions

  • Incorporate AI‑generated‑content detection into existing phishing‑awareness training modules.
  • Conduct periodic simulated “polite‑bot” exercises to measure detection rates and identify gaps.
  • Capture training completion and test results as continuous evidence for audit readiness. Source: https://www.helpnetsecurity.com/2026/09/18/social-media-bot-detection-study/

Technical Notes

  • Study methodology: randomized presentation of 4,000+ comments (positive, neutral, negative, emoji‑rich) across topics ranging from “pineapple on pizza” to “women’s rights.”
  • Detection rates: Positive bots 38 %, neutral bots 35 %, negative bots 50 %; emoji‑heavy bots >60 % detection.
  • No specific CVE or exploit; the risk is social‑engineering via language models. Source: https://www.helpnetsecurity.com/2026/09/18/social-media-bot-detection-study/
📰 Original Source
https://www.helpnetsecurity.com/2026/09/18/social-media-bot-detection-study/ ↗

This LiveThreat Intelligence Brief is an independent analysis. Read the original reporting at the link above.

From the Verisq platform · Security Awareness

Phishing and social engineering are a people-and-policy problem.

The Verisq AI Trust Operations platform pairs Security Awareness Training with policy adoption tracking, so human-risk controls are documented and audit-ready.

Explore the Verisq AI Trust Operations platform →