The FBI's Internet Crime Complaint Center (IC3) has warned about fraudulent job applications using deepfakes and stolen PII to attempt to earn IT and software development roles.
Deepfakes are taking the cybersecurity field by storm, and the artificial intelligence (AI) technology needed to create them is only becoming more sophisticated. Here’s how to thwart the two types of deepfakes.
Take an in-depth look at disinformation and how Chief Security Officers (CSOs) are best prepared to stop it. From memes to paid fake news services, disinformation has become a top problem for businesses around the globe.
Many security researchers are now predicting that deepfakes could become a major security threat in the 2021-2022 period. Where is the threat and what can you do about it?
In recent years, there has been a recognition that social engineering plays a huge part in the execution of cybersecurity attacks. The intersection of “non-physical” and “technical” social engineering is where criminals are mostly focused today. Enter deepfake technology, which poses a looming risk over enterprises and their security leaders as they figure out how to prepare for and mitigate such a risk.
Deepfakes –mostly falsified videos and images combining the terms “deep learning” and “fake” – weren’t limited in 2019 to the Nixon presentation and were not uncommon before that. But today they are more numerous and realistic-looking and, most important, increasingly dangerous. And there is no better example of that than the warning this month (March 2021) by the FBI that nation-states are virtually certain to use deepfakes to help propagate increasingly misleading campaigns in the U.S. in coming weeks.
The risk of a disinformation attack against an enterprise or large organization is increasingly serious and needs to be included in a company's risk preparedness contingency planning.
Deepfakes, either as videos or audio recordings, are the next iteration of advanced impersonation techniques that bad actors can use to abuse trust and manipulate people into complying with their requests.
Organizations need to enhance current technical security controls to mitigate against the threat of deepfakes to the business. Training and awareness will also need revamping with special attention paid to this highly believable threat.