Combat the Growing Use of AI by Cybercriminals

Artificial intelligence (AI) is starting to make it easier for cybercriminals to commit crimes in several ways:

Better phishing. As AI technology advances, cybercriminals are increasingly leveraging software tools that resemble and match the communication style and tone of any industry or individual they want to target, expertly mimicking dialects and slang.

Malware creation. Cybercriminals, even unskilled ones, are starting to use AI and write malicious programs designed to create malware to attack different operating systems, configurations and environments.

Avoiding detection. Malicious programs capable of defeating antivirus and other detection systems have existed since the 1990s, but AI will make it possible to do this faster, more efficiently, and detection systems will have to try to keep pace.

Deepfakes. Cybercriminals are using present-day AI technologies to develop very effective deepfake campaigns of hyper-realistic fake videos, digital photos, voice recordings and documents that are difficult to distinguish from the real thing. Deepfakes can take the form of video showing a company leader saying something controversial or out of character, or of a voicemail message or live phone call that looks and sounds like it comes from a colleague, boss or other trusted individual. When the computer-generated voice of an executive makes a plausible request for a money transfer, it can seem to be authentic communication.

50% of organizations have experienced identity fraud due to video deepfakes, up from 29% the year before (the study also found an increase in fraud incorporating deepfake audio).^Footnote 1

37% of banks say AI-generated fraud is their top concern.^Footnote 2

How to help protect against AI and deepfake-fueled cybercrime

While many people have heard how deepfake technology has been used to manipulate audiences through social media and news reporting, it’s important to know the red flags and what to do to help avoid becoming a victim.

Education is key. All of the usual best practices in cybersecurity and fraud prevention apply to combatting AI-enhanced threats, scams and sophisticated phishing techniques (e.g., be suspicious of unusual requests, double check email sender addresses, there is a sense of urgency and play on emotions).

Stop and evaluate if the request makes sense. It’s ok to hang up or not engage. Don’t let anyone rush you into a decision.
Verify the source. Even if the request does make sense still verify the source. Consult a trusted source or call the phone number on the back of your card or a bank statement.
Prevent others from being scammed. Scammers count on silence. Talk with friends and family about scams and any requests for money or information.

Everyone is using AI — even the criminals. The spread of artificial intelligence means steps must be taken to prepare for this growing cyberthreat.