Will AI replace humans in phishing attacks?