Businesses should take safeguards to deter the hiring of fraudulent employees, thereby preventing potential harm.
In today's interconnected world, the rise of remote work, digitization, and the networking of numerous devices has made IT landscapes increasingly complex. Employees are using a multitude of devices—desktop computers, laptops, tablets, and smartphones—that often lead to unintentional information leaks.
Organizations across the U.S and UK have become easy targets for cyber threats, with over half of businesses falling victim to financial scams potentiated by deepfake technology. The digital footprints of CEOs and CFOs, with speeches, interviews, and videos on various social media platforms and business channels like YouTube and LinkedIn, provide criminals with an abundance of material to create convincing deepfakes [1].
These AI-generated imitations of real people are being used worldwide by scammers, as seen in the British engineering group Arup, who transferred $25 million to cybercriminals in a video call featuring deepfakes of their coworkers and bosses. Advertising group WPP was also targeted but managed to thwart the scam attempt [3]. The number of deepfake attacks in the corporate world has surged profoundly, with people in the workplace being increasingly susceptible to this manipulation [2].
Cybercriminals exploit the element of trust, and while they may be targeting your employer, you may serve as the entry point. Deepfake-driven corporate fraud can erode both business confidence and public trust [2].
Given the evolving nature of these threats, organizations and their employees must establish adequate safeguards and policies to avoid exploitation. Being vigilant and following these protocols can help protect your employer, and in turn, your job.
Slow Down and Verify: Secure and confirm before responding to digital requests, especially those involving sensitive information or financial transactions. If prompted to act via a phone call or video conference, call back using familiar channels to confirm the task [3].
Watch for Red Flags: If a coworker's voice sounds odd, their camera appears blurry, or there are signs of abnormal blinking or speech out of sync with their lips, it could be a cause for concern [1]. AI and deepfakes might be sophisticated, but they're not perfect.
Promote a Culture of Cyber Awareness: Encourage open discussions with your colleagues, allowing for the pausing and raising of concerns when something feels off about a request [2]. While AI is versatile, workplaces need to set clear guidelines on its use.
Verify Attendees: Before allowing them to join, double-check invitations to ensure you are familiar with the sender. If you host a meeting, enabling waiting rooms or lobbies to approve participants is a good practice [3].
Consider Questionable IT Assistance: If someone claiming to be from IT appears during a meeting and asks to install software or gain access, exercise caution. Contact your IT department through established work channels to verify procedures [3].
References
[1] AI-Generated Deepfakes: A Growing Threat to Businesses. (2022). Retrieved May 25, 2022, from https://www.forbes.com/sites/forbestechcouncil/2022/01/28/ai-generated-deepfakes---a-growing-threat-to-businesses/[2] Deepfake Scams and How to Protect Yourself. (2021). Retrieved May 25, 2022, from https://www.trendmicro.com/vinfo/us/security/definition/deepfake-scam[3] Hoch, D., & Seiter, M. (2022). The Growing Danger of AI-Generated 'Colleagues'. Retrieved May 25, 2022, from https://www.techradar.com/news/the-growing-danger-of-ai-generated-colleagues[4] Biometric Authentication Deepfakes. (2020). Retrieved May 25, 2022, from https://www.datamation.com/networking/biometric-authentication-deepfakes/[5] Defending Against Deepfake Scams. (2021). Retrieved May 25, 2022, from https://www.forbes.com/sites/forbestechcouncil/2021/12/08/defending-against-deepfake-scams/?sh=27e4e0fc20de
- The rise in remote work and digitization has made businesses more vulnerable to cyber threats, with numerous devices like laptops, tablets, and smartphones increasing the risk of unintentional information leaks.
- AI-generated deepfakes are being utilized by cybercriminals worldwide for financial scams, often targeting CEOs and CFOs in business settings, such as LinkedIn and YouTube.
- Organizations are advised to establish policies and safeguards to protect against deepfake-driven corporate fraud, which can lead to a loss of public trust and business confidence.
- Technology and cybersecurity awareness can aid in detecting deepfakes, as employees should be vigilant for red flags such as odd voices, blurry cameras, or abnormal blinking during digital interactions.
