Scammers Target LastPass Employee With CEO Audio Deepfake
2024-04-12
PC Magazine
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Scammers used AI-generated deepfake audio to impersonate LastPass CEO Karim Toubba in a phishing attempt targeting a company employee via WhatsApp. The employee recognized the scam due to suspicious communication methods and reported it, preventing any harm. The incident highlights the growing threat of AI-enabled social engineering attacks.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves the use of AI-generated deepfake audio to impersonate a CEO, which is a clear AI system involvement. The use of this AI system was malicious and aimed at causing harm (fraud), but the harm was averted because the employee did not fall for the scam. Therefore, this event is best classified as an AI Hazard, as it plausibly could lead to harm (fraud, financial loss) if successful, but no actual harm occurred in this case.[AI generated]