The FBI has recently announced the increase in deepfake profiles detected in the selection processes of some companies.
Imposters use stolen videos, images, recordings, and identities, posing as someone else to get a remote IT job.
Hiring a deepfake can lead to serious problems when that fake employee gains access to sensitive corporate information and customer data. Doing so can pose a threat to a company's data security, and the organization may not have the opportunity to bring the scammer to justice.
But that's not the only way scammers use deepfakes to take advantage of a business. As technology evolves, they can use this new method to trick biometric tests used by banks and cryptocurrency exchanges to verify user identities for money laundering purposes. According to the Sensity report, nine of the top 10 Know Your Customer (KYC) providers were highly vulnerable to deepfake attacks.
Deepfakes are also used for targeted or mass phishing. Cybercriminals can impersonate company executives to gain a person's trust and trick them into providing sensitive data, money, or access to the organization's infrastructure. On one occasion, the criminals managed to obtain 35 million dollars by falsifying the voice of the director of a company.
Being aware of the danger is half the battle. It is important to educate employees and inform them about new fraudulent methods. A high-quality deepfake requires a lot of experience and effort, but fakes used for scams or synchronous interaction during an interview are generally low-quality, experts allege. Among the signs to detect a deepfake, they add that they should look for unnatural lip movements, poorly rendered hair, mismatched facial shapes, little or no blinking, differences in skin color or errors in the representation of clothing. However, a cybercriminal can intentionally lower the video quality to hide it. To minimize the chance of hiring a fake employee, it's best to divide job interviews into several stages that involve not only human resource managers, but also the people who will be working with a new hire. This will increase the chances of detecting something out of the ordinary.”
Technology is also a good ally to combat deepfakes. A cybersecurity solution will ensure the necessary support if a high-quality deepfake convinces an employee to download malicious files or programs or to visit suspicious links or phishing websites. An anti-fraud solution that performs user behavior analytics and monitors financial transactions can be a good option for companies using KYC, as it provides an additional layer of protection.
Jorge Daniel Tejeda