Imposters use video, images, recordings, and stolen identities pretending to be someone else to get a remote IT position. This may sound like a joke, but hiring a deepfake can lead to serious problems when a fake employee gets access to sensitive corporate information and customer data. This may pose a threat to a company’s data security, and in an event of a breach, the company likely won’t have a chance to bring the fraudster to justice.

The case mentioned above is not the only way scammers use deepfakes to take advantage of a business. As technology evolves, adversaries can use this new method to cheat biometric tests used by banks and cryptocurrency exchanges to verify users’ identities for money laundering. According to the Sensity report, nine of the top 10 Know Your Customer (KYC) vendors were highly vulnerable to deepfake attacks.

Deepfakes are also used for spear or targeted phishing. Adversaries can mimic a company’s executives to gain a person’s trust and trick them into turning over sensitive data, money, or access to the organization’s infrastructure. In one case, criminals managed to get $35 million forging the voice of a company’s director.  

“Understanding the danger is half the battle. Educate your employees and let them know about the new fraudulent methods. A high-quality deepfake requires a lot of expertise and effort, while fakes used for scams or synchronous interaction during an interview would probably be low-quality” – says Vladislav Tushkanov, lead data scientist at Kaspersky. “Among signs of a deepfake, there are unnatural lip movements, poorly rendered hair, mismatched face shapes, little to no blinking, skin color mismatches, errors in the rendering of clothes, or a hand passing over the face. However, an adversary may intentionally lower the video quality to hide these artifacts. To minimize the chance of hiring a fake employee, break job interviews into several stages involving not only HR managers but also people who will be working with a new employee. This will increase the chances of spotting anything unusual.” 

Technologies are also good helpers in combating deepfakes. A reliable cybersecurity solution will ensure support if a high-quality deepfake convinces an employee to download malicious files or programs or to visit any suspicious links or phishing websites. The anti-fraud solution that provides user behavioral analysis and financial transaction monitoring may be a good option for companies using KYC, providing an additional layer of protection.   

-Ends-

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 240,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.