The Troubling Link Between Social Engineering and Deepfake Continues to Grow.

Executive Insight Newsletter from Shiv Singh, CISSP , CEO of LINEARSTACK

AI technology encompasses more than just voice cloning. Using voice cloning and video together has led to the creation of deepfakes. These Deepfakes can produce realistic and difficult-to-verify images or videos of individuals with the help of software. Security experts have concerns about this technology because it is accessible to skilled individuals and lacks regulation, leaving it vulnerable to malicious use.?

Deepfake of voices used by hackers and cyber criminals embedded within a social engineering attack continues to raise legal and ethical concerns.?

Ethical Considerations Around the Creation and Use of Deepfakes.?

"In 2022, 66% of cybersecurity professionals experienced deepfake attacks within their respective organisations."?

AI is a popular technology with limitless capabilities. It is used in various applications such as driverless cars, dictation tools, translator apps, and predictive analytics. AI has the potential to create impressive tech products and services. However, there is also the risk of unethical use. The ethical considerations around AI are still at an early stage.?

Attack Vectors Used by Cybercriminals Using Social Engineering Tactics.?

These cyberattacks concern us because we often trust our senses. Most people need help distinguishing between a deepfake and an authentic voice or image. Even with next-generation detectors and security controls, deepfake attacks can easily bypass these security protection layers.??

Cybercriminals used to hide behind screens and avoid direct contact.?With deepfakes, fraudsters can trick us into thinking they are someone we know and trust. This attack method is why deepfakes are becoming more popular, even though they are expensive and require skill. Cybercriminals see the potential for high returns with sophisticated scams.?

Fraud from Deepfakes Creating Bigger Challenges.?

Hackers can also employ deepfakes to make phony audio or video recordings, attempting extortion or blackmail.?

Automation tools enable hackers to customize attacks using publicly accessible information instead of manually searching through the target's social media accounts, their family and friends' accounts, public records, etc. One tool for creating automated social engineering hacks is OSNIT (Open-source Intelligence).?

Why is There a Need for Cybersecurity Professionals Specializing in Deepfake Technology??

By using new detection technologies and focusing on education and ethical considerations, collaboration between private industry and organizations can address deepfakes and ensure their use benefits society. Software, AI, and cybersecurity engineers can offer proactive defensive protection against deepfakes. A combination of public, corporate, and institutional ethics policies with next-generation automation will guide the safe and innovative use of this technology for the benefit of many.?

#Deepfake #AI #ML #cybersecurity #GenerativeAI #CIO #CRO #CISO #Risk #AppSec #compliance #Goverance New Zealand Trade and Enterprise #MSSP #MSP #SecOps #SOC