back to article Uncle Sam warns deepfakes are coming for your brand and bank account

Deepfakes are coming for your brand, bank accounts, and corporate IP, according to a warning from US law enforcement and cyber agencies. In a report published on Tuesday, the NSA, the FBI, and the government's Cybersecurity and Infrastructure Security Agency (CISA) warned that threats from "synthetic media" pose a growing …

  1. Claverhouse
    Happy

    Email Doesn't Need Deepfakes

    YOUR SHIPMENT REF..909538722XI Am Diplomat Leislie Rogers

    The delivery officer appointed by the HOMELAND SECURITY DEPARTMENT chief of staff (Hon. Alejandro Mayorkas) to convey your ATM CARD to you worth US$5,800,000.00 Five Million, Eight Hundred Thousand Dollars

    I want to let you know that I'm about to proceed to your home to deliver these ATM card packages to you following directives from the Homeland Security Chief Of Staff, so please reconfirm your delivery address below to avoid wrong delivery of the package.

    1)Your Name

    2)Your delivery address

    3)Your Tel

    Please reconfirm the delivery address and needed details right away so I can proceed immediately and deliver your consignment box package to you.

    1. Version 1.0 Silver badge
      Terminator

      Re: Email Doesn't Need Deepfakes

      I'm relatively confident that we are secure when we get lots of deepfakes all the time, I suspect I should be worried if they weren't trying to hack us all the time - that would make me think we had been hacked.

      I was writing this and got a phone call, I answered, "Ock ows it gun fur yu, cannu ear may, you're nut replayin ... har owe deaft" but they never responded so I assume that was an AI spam phone call?

    2. Throatwarbler Mangrove Silver badge
      Meh

      Re: Email Doesn't Need Deepfakes

      While I don't disagree, more sophisticated fake messages make it easier to entrap less gullible or more perceptive people.

    3. very angry man

      Re: Email Doesn't Need Deepfakes

      Where do I send it, you didn't leave an email address

  2. heyrick Silver badge

    CEO, CFO, CTO...

    Easy to tell it's bollocks - those guys never talk to the little people, and rarely say anything that hasn't been passed through multiple levels of legal and HR. I mean, if the Boss Man could randomly open his mouth and let words fall out, he'd probably be as nutty as Musk (who doesn't appear to have babysitters handlers).

  3. Diogenes

    We have a passphrase because of the "Hi mum" scam

    Because of this technology the kids & us have a phrase that we have agreed on to verify that it is us if we make a "we need monies" call. We did this at the start of last year. SWMBO has done the same with her siblings, as I have with my brother.

    Both SWMBO & I have in just the last 3 weeks received a couple of very good fake calls purporting to be from our son, but without the phrase we just hang up, and then phone him just to be sure.

    Bit harder to do in a corporate environment.

    1. MachDiamond Silver badge

      Re: We have a passphrase because of the "Hi mum" scam

      "Bit harder to do in a corporate environment."

      It shouldn't be. Anybody with the authority and access to large amounts of company funds should be taking seminars on the latest scams all of the time. Somebody could even print them out and leave hardcopy in the loo. The best defense is to have a rigorous written process for the movement of funds. Anything that show up that's off-nominal should be suspect. Even with something such as one company buying out another and there being large transfers, all of the methodology should be spelled out in advance and any changes at the last minute such as a change in bank accounts to receive the funds should trigger a set of protocols. If that causes a delay, so be it.

      Large companies set up their vendors so those vendors are fully documented in the A/P system. There will be a whole checklist before checks are sent and there should be a rigorous process of re-verification if the vendor is changing banks, addresses or official company name. I'd suggest that at some point in prior to any changes, the vendor much send a memo detailing those changes and the date they will or are estimated to take effect. If there is no advance notice, the vendor payments could be put on hold. I could see a case where the vendor's bank goes into administration and they have to open another account someplace else, but that change shouldn't be handled via email, text or social media. Depending on the amounts of money involved, it could be prudent for a personal visit.

      The scams are nearly always a last minute emergency situation. Very few grifters are willing to play the long con.

      1. gzgweilo

        Re: We have a passphrase because of the "Hi mum" scam

        "Very few grifters are willing to play the long con."

        Have you ever been to Thailand -

        https://www.youtube.com/watch?v=SZXqxoC7eBw

  4. Anonymous Coward
    Anonymous Coward

    Legally obligatory 2SV for important stuff

    That is a CFO calling you must generate a one time code to verify his identity. Ideally with a physical offline device or special USB key.

    The IT system should make such verification easy for every person in the organization.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like