Cyber dangers are becoming more sophisticated at a startling rate. Deepfake technology is one of these that stands out as a particularly sneaky weapon in the toolbox of cybercriminals. Deepfakes use artificial intelligence to produce phony audio and video footage that is incredibly lifelike, allowing scam artists to pass for well-known CEOs and politically connected persons. This technological breakthrough poses a significant risk to corporate finance, where the deception of CFOs and finance team members can lead to substantial losses.

The Mechanics of Deepfake Impersonation

Consider a scenario where a deepfake video of a company’s CEO is created, instructing the CFO to transfer funds to a new vendor’s account for an urgent and critical project. The video might even address specific ongoing projects and use the CEO’s typical communication style and mannerisms, making the deception highly believable. The CFO, under pressure and convinced by the authenticity of the message, might proceed with the transaction, only to realize later that the funds have been transferred to a criminal’s account. “It’s hard to be suspicious of that which you see, listen and perceive as real, and this is precisely what makes deepfake so successful,” says Stephen Garcia, VP of Private Investigations at Wymoo International.

Recent Cases You Should Know About

Ferrari’s Narrow Escape

Ferrari recently became a target of a deepfake scam, where attackers impersonated the CEO to trick the company’s finance team into approving a significant transaction. The scam was narrowly avoided thanks to a vigilant employee who noticed discrepancies in the communication. The scammers were unable to confirm the latest book recommended by the CEO, raising suspicions to the finance executive, who alerted the authorities before any funds were transferred.

Arup’s $25 Million Loss

In another high-profile case, Arup, an engineering firm, fell victim to a deepfake scam resulting in a $25 million loss. Attackers used a digital imitation of a senior manager’s face during a video call to convince the Hong Kong office to transfer the sum in several transactions. The scam was discovered only after multiple transfers had been made, highlighting the effectiveness of the deepfake technology used.

WPP’s Attempted Fraud

The world’s largest advertising group, WPP was also targeted. Scammers created a WhatsApp account using a publicly available image of CEO Mark Read and set up a Microsoft Teams meeting, deploying a voice clone and YouTube footage. The attempt was thwarted, but it served as a stark reminder of the vulnerabilities in virtual meeting platforms.

Real-world Implications

The impact of such fraud can be devastating. Companies could lose millions of dollars in a single transaction. But beyond the immediate financial loss, the incident can severely damage the organization’s reputation, erode shareholder trust, and lead to legal repercussions. Moreover, the recovery of funds in such cases is often challenging, given the sophistication with which these criminals operate.

Preventive Measures and Training

While normally we focus a lot on safety measures like international due diligence for new business deals and cybersecurity on automated threats, the current context requires strengthening every front. To combat the threat of deepfake impersonation, companies must adopt a multi-faceted approach encompassing technology, training, and robust verification processes.

Awareness and Training:

Regular training sessions should be conducted to educate employees, especially those in finance and executive roles, about the dangers of deepfakes. Employees should be trained to recognize the signs of deepfake content and be aware of the psychological tactics used by fraudsters to create a sense of urgency.

Verification Protocols:

Implementing stringent verification protocols for all financial transactions is crucial. This could include multi-factor authentication, requiring verbal confirmation through a known and secure channel, and using secondary verification from another senior executive before approving significant transactions.

Encouraging a Culture of Skepticism:

Foster a workplace culture where employees feel empowered to question unusual requests, even if they appear to come from high-ranking executives. Encourage the finance team to adopt a “trust but verify” approach for all transaction requests. It proved to be effective for Ferrari already; even a simple personal question can make a difference.

Regular Updates and Drills:

Conduct regular security drills simulating deepfake attacks to test the effectiveness of the company’s response protocols. Keeping abreast of the latest developments in deepfake technology and updating training and security measures accordingly is vital.

If you need to verify the authenticity of an individual or entity, contact us for a free quote.

C. Wright

© Copyright Wymoo International.  All Rights Reserved.  This content is the property of Wymoo International, LLC and is protected by the United States of America and international copyright laws.  Wymoo® is a registered trademark.