Report: Deepfakes Used in Scams



Deepfake ScamsScammers created a deepfake video of Patrick Hillmann, Chief Communications Officer at cryptocurrency exchange Binance, in order to scam people. Hillmann explained in a blog post that he became aware of the scam after receiving messages from people he had never met, thanking him for meeting with them over Zoom.

“It turns out that a sophisticated hacking team used previous news interviews and TV appearances over the years to create a ‘deep fake’ of me,” Hillman said. “Other than the 15 pounds that I gained during COVID being noticeably absent, this deep fake was refined enough to fool several highly intelligent crypto community members.”

Hillman warned that developers of cryptocurrency projects are also targets of social engineering scams.

“Regular users are not the only targets — crypto project teams are now more frequently in the crosshairs,” Hillman said. “Scammers often create fake LinkedIn profiles and use them to approach unsuspecting projects with the promise to help them get listed on Binance.com. Recall the ‘Nigerian Prince’ scam from the early 2000s — pay a small upfront payment, and you’ll receive a large sum of money later, when the ‘prince’s estate’ is recovered. In this case, the equivalent of the large sum of money is having a token listed on Binance.com. But to get there, the projects are asked to pay some money first. Same trick, different wording.”

Hillman offered the following advice to help users avoid falling for these attacks, noting that users should still be wary of traditional phishing techniques:

  • “Be vigilant and always take proactive steps to ensure you don’t fall prey to scams and impersonations.
  • “Use the Binance Verify tool to check whether the account officially represents Binance. Please note that Binance Verify is not foolproof. For example, a scammer can spoof their ‘from’ email address or hide behind the real name of a Binance employee. In both cases, Binance Verify would produce mixed results.
  • “Report any suspicious activities or accounts to Binance Support.”

New-school security awareness training can enable your employees to thwart evolving social engineering techniques. (At least they can look for cues like weight gain during social isolation, etc.)

Binance has the story.


Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

https://www.knowbe4.com/phishing-security-test-offer

Subscribe To Our Blog


Ransomware Hostage Rescue Manual




Get the latest about social engineering

Subscribe to CyberheistNews