It seems that the FBI is aiming for a position where it can access confidential information, warning that videos and audio made by deepfake are used for recruitment of remote work
The
Internet Crime Complaint Center (IC3) | Deepfakes and Stolen PII Utilized to Apply for Remote Work Positions
https://www.ic3.gov/Media/Y2022/PSA220628
FBI: Stolen PII and deepfakes used to apply for remote tech jobs
https://www.bleepingcomputer.com/news/security/fbi-stolen-pii-and-deepfakes-used-to-apply-for-remote-tech-jobs/
Deepfake is a technology that uses technologies such as artificial intelligence (AI) and machine learning to generate fake content (images and videos) that is so elaborate that it can be mistaken for real images and videos. With deepfake technology, you can create photos and videos of quality that can be mistaken for the real thing, such as ' photos of fictitious people that do not exist in the world ' and ' fake movies where Mark Zuckerberg talks about'control of data''. Therefore, there is a concern that it will be abused, and even a ' project to detect deepfake ' has been launched.
'This person does not exist' that can easily generate an image of a person who does not exist in this world with one touch --GIGAZINE
Content generated using deepfake has been used to spread pornography and fake news , and in 2022 Ukrainian President Volodymyr Zelensky calls on the Ukrainian people to surrender to Russia during the war with Russia. Deepfake video has become a hot topic.
'Fake footage of Ukrainian President Zelensky calling on people to surrender' has been released and Facebook has been deleted --GIGAZINE
Meanwhile, the FBI's Internet Crime Complaint Center (IC3) used 'voices, images, and videos created by deepfake based on stolen personal information' in an online interview for recruitment where remote work is permitted. Cases that have been reported. '
According to IC3, malicious attackers use deepfake to impersonate stolen personal information and apply for 'jobs in positions that allow access to confidential company and customer information.' .. 'The recruitment for remote work or telecommuting identified in this report includes jobs related to information technology and computer programming, databases, and software. In particular, attackers are customer personal information and corporate financial data.・ We are aiming for a position where we can access IT databases and occupancy information, 'IC3 wrote, alerting technology-related companies.
In some cases, deepfake voice is used in recruiting, and 'some are sufficiently convincing,' IC3 points out. However, when disguising the voice of a person who is recruiting jobs, it seems that there are some that can easily be understood as 'using fake voice'.
According to IC3, 'Voice spuffing or voice deepfake (voice using deepfake technology) during an online interview with a potential applicant in a complaint that deepfake is being used to recruit remote work jobs. (To convert to another voice in real time) has been reported. ”“ In remote interviews with people using voice deepfake, the behavior of the person and the movement of the lips reflected in the camera are completely different from the voice. Also, there are cases where visual movements such as coughing and squeezing do not match audibly. ' There are cases where they do not match, and it seems that it is possible to distinguish from this that it is not a job application by a real person.
According to the FBI's report, the victims whose personal information was used by the attackers seemed to have abused the 'profile of pre-employment background check information' that the company gave to recruiters.
FBI provides useful information (IP address) to identify attackers for 'victims of recruitment using deep fake (individuals whose personal information has been abused and companies that have applied for recruitment)' via the IC3 platform. And email address, phone number, name, etc.).
The FBI warned in a Private Industry Notification issued in March 2021 that deepfake is becoming more sophisticated and misused on a daily basis. Europol (Europol) will soon be using deepfake for fraud and evidence falsification by cybercriminal organizations in April 2022, and may become a regular use for non-consensual fake pornography. As warned , police agencies are becoming more and more vigilant against deepfake.
Related Posts:
