Watch for Deep Fakes
I received an email from Barracuda, which is the company I use for security/remote services highlighting an issue that is very important now: Deep Fakes. These are becoming much easier to create and much harder to detect. The linked blog post is directed at Managed Service Providers, but I’m linking it and highlighting key points to help users keep safe from this kind of attack.
Personal contact and verification has never been more important.
“Never approve sensitive requests such as money transfers, password resets, or sharing confidential information based only on a phone call, voice message, or video. Always verify the request through a second trusted method, such as calling a known phone number or confirming it through an internal messaging system,” Bhaskar says.
Deepfakes are now an MSP problem
Making Fakes Is Easy
Scammers don’t need expensive equipment or days to weeks to produce a deep fake any more. All it takes is a 1-minute clip of a loved one speaking on Facebook, YouTube, or a voicemail to create a convincing replica of their voice. If a voice on the phone sounds identical to a grandchild or friend, it is no longer proof that it’s actually them.
Easy Tricks Don’t Work Any More
Weird glitches and obvious signs are no longer a safe indicator. An image or a voice may look and sound precisely like a friend or family member. Even asking for a gesture may not work, as a good animation can respond practically instantly.
Scammers Want …
… money, and information that will help them get money. Any time anyone wants a password, or asks you to forward them a code sent in a text, don’t do it! Neither your bank nor any other reputable company will ask you to provide them a code in that way. If you think it might be valid, call the person using a number you already have on record. Don’t trust anything in a text, email, or voicemail.
Establish a Way to Identify Family/Friends
This could be a codeword, or a simple plan to call back on a known number if anything seems unusual. You can’t just trust the voice on your phone any more.
Take Your Time
Scammers thrive on a sense of urgency and fear. Take time to consider and verify. If you’re one of my clients, you have my cell phone number and I am rarely away from it. Text me or call me. If nothing else, that will give you time to consider.
