Adobe's New VoCo Is PhotoShop For Audio - The Potential For Voice Phishing Is Horrendous

Stu Sjouwerman | Jan 3, 2017

Putting_Words_In_Mouth.jpgOur friends at www.Social-Engineer.org sent me some interesting news in their January newsletter: "Adobe recently announced Project VoCo at the November Adobe Max conference.

It’s purported to have the ability to take recordings of someone’s voice, then create audio that sounds like it is from that person. In a nutshell, it’s Photoshop for audio."

And they continued with: "According to Adobe, the software needs about twenty minutes of someone’s voice, and then it can recreate that voice exactly.

The software doesn’t just find words and patch them together;the 7-minute demo shows it can actually mimic someone andcreate speech that the person never said. You should watch it!

Couple that with the fact that spear phishing of C-suite employees is becoming a bigger problem, and you’ve got a volatile mixture. It’s usually not hard at all to find twenty minutes of audio on most CEOs and other high-level employees. considering many of them participate in press conferences, speeches, podcasts, and interviews."

There are a multitude of ways this can be misused. For instance, you can now fully automate voice phishing with the simulated voice of someone you know, like your CEO. Hmmm.

Good job on the side of Chris Hadnagy & Michele Fincher and their gang to warn for this!

Let's stay safe out there.

Warm regards,

Stu Sjouwerman

Founder and CEO, KnowBe4, Inc.

Stu Sjouwerman

Topics: Phishing

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.