Imposters use deepfakes to land remote IT jobs

A recent announcement by the FBI revealed that a growing number of organizations are reporting people applying for jobs using deepfakes.

Fraudsters use stolen videos, images, recordings and identities to pretend to be someone else in order to obtain a remote computer position. It may sound stranger than fiction, but hiring a deepfake can have serious consequences if an impostor had access to sensitive company information and customer data.

According to Kaspersky, this can pose a threat to a company’s data security, and if breached, the company will not have the opportunity to bring the fraudster to justice.

And that’s not the only way scammers use deepfakes to take advantage of a business. As technology evolves, malicious actors can use this new method to trick biometric tests used by banks and cryptocurrency exchanges to verify user identities for money laundering purposes.

A recent report from Sensity revealed that the top 10 know-your-customer (KYC) providers were highly vulnerable to deepfake attacks.

Additionally, deepfakes are used for spear phishing or targeted phishing. Threat actors can impersonate a company’s executives to gain an individual’s trust and trick them into handing over sensitive data, money, or access to the organization’s infrastructure.

In one case, Kaspersky says the criminals got away with $35 million by forging the voice of a corporate director. “Understanding the danger is half the battle,” says Vladislav Tushkanov, senior data scientist at Kaspersky. “Educate your employees and inform them of new fraudulent methods.”

He says a high-quality deepfake requires a lot of expertise and effort, while fakes used for scams or synchronous interactions during an interview would likely be low quality.

“Signs of a deepfake include unnatural lip movements, misrendered hair, mismatched face shapes, little or no eye blinking, mismatched skin color, errors in rendering clothes or a hand running over the face,” Tushkanov said.

On the other hand, he says that a bad actor might intentionally lower the quality of the video to hide these elements.

“To minimize the chances of hiring a fake employee, break up job interviews into several stages involving not only HR managers, but also the people who will be working with a new employee. This will increase the chances of spotting something wrong. ‘unusual.

In closing, he says the technology is also useful in combating deepfakes. A reliable cybersecurity solution will provide support if a good quality deepfake convinces an employee to download malicious files or programs, or if they click on a suspicious link or phishing website.

Source link

Comments are closed.