Artificial Intelligence (AI) is fast changing the way we live and work. It is also becoming a dangerous tool for cyber criminals to carry out new and sophisticated attacks. The US Federal Bureau of Investigation (FBI) issued a serious warning about how cyber criminals are leveraging generative AI(gen AI) to create more convincing and efficient fraud attempts.
In a public service alert I-1203240-PSA, they shared insights on how attackers exploit gen AI to craft believable schemes to carry out large scale fraud. By using gen AI, they are also able to reduce the time and effort it takes to deceive their targets and also improve on the quality and effectiveness of their scams. These scams range from romance and investment scams to job hiring scams. “These tools assist with content creation and can correct for human errors that might otherwise serve as warning signs of fraud” reads the PSA.
Criminals use gen AI in their fraud schemes to increase public recognition and scrutiny in the following ways:
- AI-Generated Text: Criminals now use generative AI to create convincing text that enables more effective social engineering and financial fraud schemes. Language translation tools help criminals eliminate grammatical errors, making their fraudulent communications appear more legitimate. Additionally, they create entire fraudulent websites with AI-powered chatbots designed to manipulate potential victims into clicking malicious links or engaging with scam content.
- AI-Generated Images: Fraudsters use these AI-generated images to construct fake social media profiles, generate fraudulent identification documents, and produce convincing visual narratives. They create images of celebrities endorsing products, fabricate scenes of natural disasters or global conflicts to solicit fraudulent donations, and even generate manipulative images for market schemes. Criminals can now create harmful images, such as pornographic content, to extort victims through sextortion attempts.
- AI-Generated Audio (Vocal Cloning): Criminals can now generate audio clips that perfectly mimic the voices of well-known public figures or personal contacts. These audio technologies enable sophisticated scams where fraudsters create short voice clips impersonating family members in crisis, demanding immediate financial assistance or ransom payments.
- AI-Generated Videos: This allows criminals to create highly convincing visual scenarios. These videos can show real-time conversations with seemingly legitimate authority figures. Attackers can use generative AI to produce videos for private communications, attempting to prove the authenticity of an online contact. They also create misleading promotional materials for investment fraud schemes, using video content to make their scams more credible.
The Bureau has advised that families create a secret word or phrase to verify identities and protect against AI-powered voice-cloning scams which criminals use to impersonate loved ones in crisis. This unique phrase must be used by a relative when in trouble to prove that they are indeed who they say they are.
Other recommended tips for protection includes:
- Look for Imperfections as AI-generated content isn’t perfect. Watch for strange details like irregular facial features, unnatural movements, voice matching or slight visual glitches.
- Listen closely to the tone and word choice to differentiate between a legitimate phone call from a loved one or a phony call.
- Limit online content of your image or voice. Make social media accounts private and limit the amount of personal information you share online.
- Avoid sending money, gift cards, cryptocurrency, or other sensitive information to people you do not know or have met only online or over the phone.
- Be Suspicious of Unexpected Calls. Verify the identity of the person calling you by hanging up the phone, confirming the identity of the person or organization before calling the person back using a number that you know is genuine
Artificial intelligence (AI) is a powerful tool, but in the wrong hands, it becomes a weapon. It is important to stay alert and well informed. If something seems too strange or too good to be true, it probably is, therefore, Trust your instinct. Use efficient security tools and follow best security measures to avoid falling victims to AI-powered attacks. Report any case of fraud or scams to the appropriate authorities.