The real shift is not a new attack type, but a cheaper way to scale deception, forcing defenders to rethink identity, verification, and training.