Deepfake technology utilizes machine learning and artificial intelligence (AI) to manipulate or create synthetic audio, video and images that appear authentic. Deepfakes are commonly featured in entertainment and politics to spread false information and propaganda. For instance, deepfake has been used to show a celebrity or leader saying something that they didn’t, and this creates fake news.
Unfortunately, in deepfakes, cybercriminals have found a new tool for cyberattacks. Cybercriminals are now using deepfakes to pose a variety of enterprise risks.
How Cybercriminals Are Using Deepfakes
Deepfake technology is now used to create scams, hoaxes and false claims that undermine and destabilize organizations. For instance, a manipulated video might show a senior executive associated with fake news, such as admitting to a financial crime or spreading misinformation about a company’s products. Such corporate sabotage costs a lot of time and money to disprove and can impact a business’s reputation.
Another way businesses can be negatively impacted is through social engineering attacks such as phishing, which relies on impersonation to compromise an email. Similarly, social engineering using deepfakes can feature voice or video impersonations. A good example of such an impersonation was reported in The Wall Street Journal, in which fraudsters used AI to mimic a CEO’s voice. This incident happened in March 2019, when criminals impersonated a chief executive’s voice to direct a payment of $243,000.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
- Use anti-fake technologies
Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos. - Enforce robust security protocols
Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums. - Develop new security standards
As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls. - Training and awareness
Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim. - Keep user data private
Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online. - Disinformation response policy
Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Long term care (LTC) is associated with the elderly for good reason. Over the past 50 years, life expectancy has increased significantly and is therefore something all families should be prepared to address. Even though we may live to a ripe old age, that doesn’t mean we will be healthy or able to live independently. Most people develop one or more chronic conditions that require living assistance – and many live with that ailment for years. Conditions such as arthritis, joint and muscle deterioration, or back pain often lead to chronic disability, making it difficult to impossible to take care of your own physical and lifestyle needs. Among even healthy seniors, about half of people age 80 and older experience some form of dementia or cognitive impairment.
Inflation Reduction Act of 2022 (HR 5376) – This legislation was originally introduced as the Build Back Better Act, President Biden’s signature bill of 2021. After suffering defeat in the Senate, the bill was later revised with fewer provisions to enhance its likelihood of passage, and renamed the Inflation Reduction Act. The bill authorizes funding for investments in domestic energy production and manufacturing with the goal of reducing U.S. carbon emissions by 40 percent by 2030. The bill provides tax credits for clean energy home enhancements and electric vehicle purchases, permits Medicare to negotiate prescription drug prices,and extendslower healthcare premiums for insurance purchased via the Affordable Care Act program through 2025. Also billed as a deficit reduction tool, the legislation imposes a minimum 15 percent corporate tax rate on large businesses with more than $1 billion in reported income, and a 1 percent excise tax on corporate stock buybacks. Furthermore, the bill increases previously reduced funding for the IRS in order to help track down and recoup taxes unlawfully skirted by high income earners. Initially introduced on Sept. 27, 2021, the Act was passed by both the House and the Senate in August and signed into law on Aug. 16.
Web browsers such as Google Chrome, Firefox, Safari and Edge, among others, play an essential role in enabling access to websites on the internet. Most browsers allow users to install extensions, also referred to as add-ons or plug-ins. These extensions are applications or small software modules that add functionality and other useful features to a browser.
During the first year of the pandemic, many homeowners spent their down time upgrading their homes. The year 2020 alone experienced at 3 percent uptick in spending on home improvements – to the tune of nearly $420 billion nationwide. This included modifications for remote work, online schooling and leisure activities at home.
Supply Chain Security Training Act of 2021 (S 2201) – This legislation is designed to identify supply chain risks and develop a government program to train federal officials with supply chain risk management responsibilities to prepare and mitigate those risks. The training program would cover the complete acquisition life cycle, including funding for data access and processing as well as appropriate technology and communication vehicles. The bill was introduced by Sen. Gary Peters (D-MI) on June 23, 2021. It passed in the Senate on Jan. 11 and in the House on May 10. It was signed into law by the president on June 16.
Non-fungible tokens (NFTs) are rising in demand, and some brands are already generating great results in their campaigns and providing a unique experience to customers. As the hype around NFTs continues, businesses need to understand how they can benefit.
Imagine selling slices of a large pizza. You can cut it into four even slices and charge $2 a slice. Or, you can cut it into eight even slices and charge $1 per slice. Either way, the total value of the pizza will still be $8.