May 16, 2025
Trending News

Multinational employee transfers millions after video call with AI-generated boss

  • February 5, 2024
  • 0

An employee at a large company transferred $25.6 million after a video call with his CFO. Unfortunately, it turned out that he had been talking to an AI-generated

An employee at a large company transferred $25.6 million after a video call with his CFO. Unfortunately, it turned out that he had been talking to an AI-generated deepfake.

An employee of a multinational company in Hong Kong has personally experienced how AI takes phishing to the next level. The person concerned followed a video call with his CFO and other well-known faces from his company. In the call, the employee was asked by the CFO to quickly transfer money to some local bank accounts. The video meeting showed urgency, and none of the other participants on the call found the question strange. The victim transferred money worth 200 million Hong Kong dollars to the criminals’ account.

Deepfake CFO

Ultimately, it turned out that the employee wasn’t actually on the phone with his CFO. The CFO, like all his colleagues, were AI-generated deepfakes. The criminals allegedly used publicly available images to generate the deepfales.

The employee was initially contacted via email about the transactions and was certainly suspicious. The video call was set up to reassure the victim and convince them that the transaction was indeed legitimate.

Hong Kong police have arrested several people in connection with the theft. Above all, the incident shows how risky it is to trust things on the Internet. Even if you see your boss’ face and hear his voice, you could be dealing with phishing today. AI tools are getting better and better, so the techniques are expected to become more widespread.

Suspicion is trump

Arming yourself against this is admittedly difficult, but not impossible. Certain things are difficult for criminals to imitate. If the CFO’s account has not been hacked, attackers can still impersonate that person, but the meeting request will still come from a fake address. Something like that should raise suspicion. If in doubt, setting up a call yourself using your company’s address book can also help. One piece of golden advice remains: There is no shame in being too suspicious on the internet. The alternative is much worse.

Source: IT Daily

Leave a Reply

Your email address will not be published. Required fields are marked *

Exit mobile version