Spearphish pivots to deepfake Zoom call, leads to swift exit of cash.
A poor peon in the finance department of a large company got taken in by a deepfake of the firm's chief financial officer.
Your humble blogwatcher curated these bloggy bits for your entertainment.
6 million in a scam after employees at its Hong Kong branch were fooled by a digitally recreated version of its chief financial officer ordering money transfers in a video conference call.
Everyone present on the video calls except the victim was a fake [but] looked and sounded like real people the targeted employee recognised.
The scammers were able to generate convincing representations of targeted individuals that looked and sounded like the actual people.
The employee followed instructions given during the meeting and made 15 transfers totalling HK$200 million to five Hong Kong bank accounts.
The person realised it was a scam upon making an inquiry with the company's headquarters.
The force said it hoped members of the public were aware that scammers were now capable of using deepfake technology.
Senior Inspector Tyler Chan Chi-wing suggested asking the person to move their head, posing questions to determine their authenticity and become immediately suspicious the moment money is requested.
Thanks to advances in AI, deepfakes have become more convincing than ever before, and they're often used to defame people in the public eye.
It's no surprise that the technology is being abused by criminals in some very inventive ways to facilitate scams.
The Hong Kong police said that it alone has come across more than 20 cases that involved the use of AI deepfakes to trick facial recognition systems.
They] recently arrested six people in connection with a scam that involved eight stolen Hong Kong identity cards.
The scammers used the cards to create deepfakes that could fool facial recognition systems, and then applied for more than 90 loan applications and bank account registrations.
I note the police aren't identifying the company.
If the Universe had a sense of irony, the company would be Zoom.
My parents, friends and coworkers all still getting scammed by emails that are barely beyond the quality of Nigerian Prince pleas.
If high-quality deepfakes go mainstream, it's going to be a fools errand trying to keep everyone and their mothers from emptying their bank accounts at the drop of a hat.
There is no process stronger than the manager firing an employee for disobeying an order.
This Cyber News was published on securityboulevard.com. Publication date: Mon, 05 Feb 2024 18:43:03 +0000