Phishing works so well that cybercriminals don't need deepfakes

Deepfake
(Image credit: Shutterstock / meamorworks)

Scammers may never need to use deepfakes at scale because there are other, more efficient methods to trick people into giving away personal information and payment data, according to John Shier, senior security adviser for cybersecurity firm Sophos. 

Speaking to The Register, Shier said deepfakes aren’t that popular among scammers, largely because they aren’t necessary.

"The thing with deepfakes is that we aren't seeing a lot of it," he said. "People will give up info if you just ask nicely."

Deepfakes in the future

In simple terms, deepfakes are videos that use artificial intelligence to generate authentic-looking videos of people saying things that they’ve in fact been coded to do by a programmer.

Common uses for the technology amongst scammers include identity theft. In 2018, researchers highlighting the dangers of deepfakes used the technology to steal the identity of former US President Barack Obama and spread a hoax across the internet.

Deepfakes might be overkill for some types of fraud, but Shier thinks romance scams (wherein a scammer becomes close with their victim online to encourage them to send money their way) could leverage the tech well, as videos will lend inherent credibility to an online persona.

However, Shier believes that we’re not seeing the maximum impact that deepfakes may have on socially-engineered fraud in the future, and that we should still be wary of deepfakes being used in organized crime.

"AI experts make it sound like it is still a few years away from massive impact," he said. "In between, we will see well-resourced crime groups executing the next level of compromise to trick people into writing funds into accounts."

Shier’s not the only security researcher worried about deepfakes. Eric Horvitz, Microsoft’s Chief Science Officer, discussed the idea of advanced deepfake use within fraud instances in an academic research paper published last month, titled “On the horizon: Interactive and Compositional Deepfakes”.  

In the paper, Horvitz discusses his belief believes in the near future, we won’t be certain if the person we’re speaking to on a video call is real or an impostor, because deepfake technology has become easier to obtain and operate.

Pexels

(Image credit: Pexels)

“Today, open source toolkits are available for producing deepfakes, lowering the bar on required expertise to generate and then distribute them at lightning speed across social media. We can expect deepfakes to become difficult to discriminate from reality.”

While deepfakes may not be quite so common at the moment, it’s clear that scammers are still committed to exploiting the technology to ensnare their victims over the internet.

The ubiquitous nature of the internet means that a victim could be anyone, and that’s the concern.

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A deepfake image being created on a computer.
Deepfake scam calls are costing British victims hundreds each time - here's how to stay safe
Hands typing on a keyboard surrounded by security icons
Tackling the threat of deepfakes in the workplace
Hands typing on a keyboard surrounded by security icons
The psychology of scams: how cybercriminals are exploiting the human brain
Concept art representing cybersecurity principles
Cybercriminals cashing in on holiday sales rush
AI deepfake faces
In a test, 2000 people were shown deepfake content, and only two of them managed to get a perfect score
Phishing
Corporate executives are being increasingly targeted by AI phishing scams
Latest in Security
A graphic showing someone on a tablet working through a supply chain.
Security issue in open source software leaves businesses concerned for systems
ransomware avast
One of the most powerful ransomware hacks around has been cracked using some serious GPU power
person at a computer
Infamous ransomware hackers reveal new tool to brute-force VPNs
person at a computer
Many workers are overconfident at spotting phishing attacks
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
Microsoft 365 accounts are under attack from new malware spoofing popular work apps
Data Breach
Thousands of healthcare records exposed online, including private patient information
Latest in News
Panos Panay and Alexa Plus
Amazon's Panos Panay teases future Alexa+ devices from speakers to possible wearables
Metroid Prime 4
I reckon the Nintendo Switch 2 could launch with Metroid Prime 4 – here’s why
Samsung Galaxy Z Fold 6
New rumors predict a foldable iPhone will launch next year – and cost almost twice as much as the iPhone 16 Pro Max
Pebble smartwatch countdown
Pebble confirms its smartwatch announcement is just hours away
Logo of YouTube Shorts
Is YouTube auto-playing Shorts when you open the app? Well, you’re not alone - here’s how to fix it
Google DeepMind panel discussion
“More sovereignty and protection” - Google goes all-in on UK AI with data residency, upskilling projects, and startup investments