Deepfake phishing
Deepfake phishing - this is a type of phishing attack that includes deepfake mechanisms for convincing a user that they are speaking with one of their relatives, a manager, or a CEO. This attack happens via phone call or video call; an attacker uses deepfake technology to change appearances and look like someone else, for example, relatives, a bank manager, an accountant, or a CEO, and claims money transfer or requests sensitive information from the victim.
History
In 2019, at the beginning of the COVID-19 pandemic, many countries were locked down due to the lockdown. The business sphere moved online for work, including hiring processes, daily meetings, and even decision-making. These lockdowns also led to the popularization of remote work, remote study, remote medicine, etc.
Such working conditions, where people started using applications for video calls, led to the popularization of deepfake phishing.
Type of phishing
Deepfake phishing can be divided into the following types:[1][2]
Audio
AI is trained to mimic a person’s voice. It can be used as a separate phishing attack by phone call or in combination with video. Currently, it is mostly used as a deepfake technique.
Visual
A standard deepfake mechanism for making pre-recorded videos with phishing ideas. For example, missed video calls or videos of chairmen suggesting an investment plan or donation.
Real time
Real-time deepfakes are still a relatively new innovation and can be easily detected by some visual artifacts.
Example of attacks
Criminals used artificial intelligence-based software to impersonate a chief executive’s voice and demand a fraudulent transfer of €220,000 ($243,000).[3]
AI voice cloning techniques were used to impersonate the CEO of a large company and tricked the organization’s bank manager into transferring $35 million to another account to complete an “acquisition.”[4]
References
- ↑ "DEEPFAKE PHISHING – AN EMERGING THREAT". 2022-11-13. Unknown parameter
|url-status=ignored (help) - ↑ "Why deepfake phishing is a disaster waiting to be skyrocket". 2022-12-09. Unknown parameter
|url-status=ignored (help) - ↑ "Fraudsters Used AI to Mimic CEO's Voice in Unusual Cybercrime Case". 2019-08-30. Unknown parameter
|url-status=ignored (help) - ↑ "Fraudsters Cloned Company Director's Voice In $35 Million Bank Heist, Police Find". 2021-10-14. Unknown parameter
|url-status=ignored (help)
This article "Deepfake phishing" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Deepfake phishing. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
