How deepfakes attack business and how to combat them

Issue 4 2022 News

Recently, the FBI announced that more companies have been reporting people applying for jobs using deepfakes. Imposters use video, images, recordings, and stolen identities pretending to be someone else to get a remote IT position. This may sound like a joke, but hiring a deepfake can lead to serious problems when a fake employee gets access to sensitive corporate information and customer data.

This may pose a threat to a company’s data security, and in the event of a breach, the company likely won’t have a chance to bring the fraudster to justice.

The case mentioned above is not the only way scammers use deepfakes to take advantage of a business. As technology evolves, adversaries can use this new method to cheat biometric tests used by banks and cryptocurrency exchanges to verify users’ identities for money laundering. According to the Sensity report, 9 of the top 10 Know Your Customer (KYC) vendors were highly vulnerable to deepfake attacks.

Deepfakes are also used for spear, or targeted, phishing. Adversaries can mimic a company’s executives to gain a person’s trust and trick them into turning over sensitive data, money or access to the organisation’s infrastructure. In one case, criminals managed to get $35 million by forging the voice of a company’s director.

“Understanding the danger is half the battle. Educate your employees and let them know about the new fraudulent methods. A high-quality deepfake requires a lot of expertise and effort, while fakes used for scams or synchronous interaction during an interview would probably be low-quality,” says Vladislav Tushkanov, lead data scientist at Kaspersky.

“Among signs of a deepfake, there are unnatural lip movements, poorly rendered hair, mismatched face shapes, little to no blinking, skin colour mismatches, and errors in the rendering of clothes, or a hand passing over the face. However, an adversary may intentionally lower the video quality to hide these artefacts. To minimise the chance of hiring a fake employee, break job interviews into several stages involving not only HR managers, but also people who will be working with a new employee. This will increase the chances of spotting anything unusual.”

Technologies are also good helpers in combating deepfakes. A reliable cybersecurity solution will ensure support if a high-quality deepfake convinces an employee to download malicious files or programs, or to visit any suspicious links or phishing websites. An anti-fraud solution that provides user behavioural analysis and financial transaction monitoring may be a good option for companies using KYC, providing an additional layer of protection.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

IziCash awarded membership by CIT Association of SA
News
IziCash Solutions, a provider of cash logistics and cash management services to the retail and banking sector, has become a member of CITASA, the Cash-In-Transit Association of South Africa.

Read more...
22 TB hard drives from WD
News
Western Digital extends HDD technology and areal density leadership across smart video, network attached storage (NAS) and IT/data centre channel segments.

Read more...
From the editor's desk: Maybe I’m too old?
Technews Publishing News
There are many companies these days touting their ability to securely authenticate people via mobile devices (or selfies), claiming that it is secure and easy. Some banks are even allowing people to ...

Read more...
ADI Expo Limited Edition 2022
ADI Global Distribution News
ADI South Africa, with its leading suppliers from across the video, intrusion and access control industries, is once again hosting its annual ADI Expo in September.

Read more...
Hikvision integration with Page Automation
Hikvision South Africa News
Hikvision has announced the integration of its MinMoe Face Recognition terminals and its Hik-ProConnect online device and service management platform with Page Automation’s SmarTTime software.

Read more...
ESDA’s annual charity fundraiser
ESDA (Electronic Security Distributors Association News Conferences & Events Associations
The ESDA Annual Charity Fundraiser, part of the Electronic Security Distributors Association’s Golf Day, will take place at Benoni Lake Golf Course on Wednesday, 21 September 2022.

Read more...
Gallagher launches Tech Talk
Gallagher News Access Control & Identity Management Perimeter Security, Alarms & Intruder Detection
Gallagher has announced the launch of its new Security in Focus podcast series called Tech Talk, hosted by chief technology officer Steve Bell.

Read more...
IDEMIA and Ideco demonstrate their value stacks
Technews Publishing Ideco Biometrics IDEMIA Conferences & Events Access Control & Identity Management News
Ideco and IDEMIA recently hosted a travelling show where attendees were given an update on the companies, as well as the full value stack they offer.

Read more...
Sustainability, trust and predictability
Technews Publishing Bosch Building Technologies Conferences & Events CCTV, Surveillance & Remote Monitoring News Integrated Solutions
The future for Bosch Building Solutions is focused on predictive solutions based on sustainability and trust in an AIoT world of cloud services.

Read more...
Networked devices increase cyber risks for building systems
Technews Publishing News
Building managers need an integrated approach with IT professionals and clear lines of responsibility to ensure optimal facilities management and cybersecurity.

Read more...