Collecting Cyber-News from over 60 sources

Tag: deep-fake

N. Korean Group BlueNoroff Uses Deepfake Zoom Calls in Crypto Scams

Jun 26, 2025 3:36 PM

Tags: access, crypto, deep-fake, group, hacker, korea, macOS, malware, north-korea, scam

The notorious BlueNoroff group from North Korea is using deepfake video and deceptive Zoom calls to steal cryptocurrency by enticing targets to unwittingly download malware onto their macOS devices and letting the hackers to get access into them. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/n-korean-group-bluenoroff-uses-deepfake-zoom-calls-in-crypto-scams/
Smashing Security podcast #423: Operation Endgame, deepfakes, and dead slugs

Jun 26, 2025 1:35 AM

Tags: botnet, cyber, cybercrime, deep-fake, hacker, malware, ransomware

In this episode of the “Smashing Security” podcast, Graham unravels Operation Endgame – the surprisingly stylish police crackdown that is seizing botnets, mocking malware authors with anime videos, and taunting cybercriminals via Telegram. And BBC cyber correspondent Joe Tidy joins us to talk about “Ctrl-Alt-Chaos”, his new book diving into the murky world of teenage…
Deepfakes fuel surge in dating app fraud

Jun 24, 2025 10:35 PM

Tags: deep-fake, fraud

First seen on scworld.com Jump to article: www.scworld.com/brief/deepfakes-fuel-surge-in-dating-app-fraud
The CISO’s 5-step guide to securing AI operations

Jun 24, 2025 10:35 AM

Tags: ai, api, best-practice, business, cio, ciso, cloud, control, cybersecurity, data, deep-fake, framework, google, governance, guide, infosec, injection, intelligence, law, LLM, mitre, programming, risk, risk-management, software, startup, supply-chain, tactics, technology, threat, tool, training, unauthorized, vulnerability

2. Develop a comprehensive and continuous view of AI risks: Getting a handle on organizational AI risks starts with the basics, such as an AI asset inventory, software bills of material, vulnerability and exposure management best practices, and an AI risk register. Beyond basic hygiene, CISOs and security professionals must understand the fine points of…
New bipartisan Senate measure seeks to curtail AI-based finance deepfake schemes

Jun 23, 2025 10:35 PM

Tags: ai, deep-fake, finance

First seen on scworld.com Jump to article: www.scworld.com/brief/new-bipartisan-senate-measure-seeks-to-curtail-ai-based-finance-deepfake-schemes
AI Deepfake Scams Surge: Over $200 Million Lost in Just Three Months

Jun 23, 2025 6:35 PM

Tags: ai, deep-fake, scam, threat

Deepfake scams cost over $200 million in three months. Learn how these AI threats are evolving”, and how individuals and organizations can fight back. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/ai-deepfakes-surge-200-million-lost/
North Korean BlueNoroff Uses Deepfakes in Zoom Scams to Install macOS Malware for Crypto Theft

Jun 23, 2025 5:35 AM

Tags: crypto, deep-fake, macOS, malware, north-korea, scam, theft

The post North Korean BlueNoroff Uses Deepfakes in Zoom Scams to Install macOS Malware for Crypto Theft appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/north-korean-bluenoroff-uses-deepfakes-in-zoom-scams-to-install-macos-malware-for-crypto-theft/
Financial deepfake scams targeted in bipartisan Senate bill

Jun 20, 2025 10:35 PM

Tags: ai, deep-fake, finance, scam

New legislation seeks the creation of a Treasury-led task force to examine and combat AI-fueled scams that trick Americans out of their money. First seen on cyberscoop.com Jump to article: cyberscoop.com/financial-deepfake-scams-targeted-in-bipartisan-senate-bill/
Cyberangriffe: Nordkoreanische Hacker faken Vorgesetzte in Videokonferenzen

Jun 20, 2025 1:35 PM

Tags: cyberattack, deep-fake, hacker, malware

Um Malware einzuschleusen, verwenden nordkoreanische Hacker mittlerweile offenbar Deepfakes von Vorgesetzten in fingierten Videomeetings. First seen on golem.de Jump to article: www.golem.de/news/cyberangriffe-nordkoreanische-hacker-faken-vorgesetzte-in-videokonferenzen-2506-197312.html
North Korea’s BlueNoroff uses AI deepfakes to push Mac malware in fake Zoom calls

Jun 19, 2025 3:36 PM

Tags: access, ai, attack, backdoor, control, crypto, data, deep-fake, defense, detection, edr, endpoint, injection, korea, least-privilege, macOS, malicious, malware, north-korea, threat, tool, training

Campaign delivers modular, persistent, Mac-specific malware: Huntress recovered a total of eight distinct malicious binaries, each with specific tasks. The primary implant, ‘Telegram 2’, was written in Nim and embedded itself as a macOS LaunchDaemon to maintain persistence. It acted as a launchpad for the real power tools, including Go-based ‘Root Troy V4’ backdoor and…
BlueNoroff Deepfake Zoom Scam Hits Crypto Employee with MacOS Backdoor Malware

Jun 19, 2025 2:35 PM

Tags: apple, attack, backdoor, crypto, cyber, deep-fake, korea, macOS, malware, north-korea, scam, threat

The North Korea-aligned threat actor known as BlueNoroff has been observed targeting an employee in the Web3 sector with deceptive Zoom calls featuring deepfaked company executives to trick them into installing malware on their Apple macOS devices.Huntress, which revealed details of the cyber intrusion, said the attack targeted an unnamed cryptocurrency foundation employee, who received…
Can Deepfakes Fool Your HR or IT Teams? What Every Remote-First Company Must Know in 2025

Jun 18, 2025 10:54 AM

Tags: corporate, deep-fake

In 2025, the person you just hired might not be a person at all. Sounds dramatic? It’s not. Deepfakes have officially entered the corporate chat…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/06/can-deepfakes-fool-your-hr-or-it-teams-what-every-remote-first-company-must-know-in-2025/
KI-Betrug explodiert: +1100″¯% mehr Deepfakes in Deutschland

Jun 16, 2025 7:57 AM

Tags: ai, deep-fake, fraud, germany

Deepfakes, synthetische Ausweise und KI-generierte Identitäten: Deutschland wird zum Brennpunkt digitaler Betrugsversuche. Eine neue Studie des Verifizierungsunternehmens Sumsub zeigt, wie rasant die Bedrohung durch künstliche Intelligenz wächst und warum klassische Sicherheitsmaßnahmen zunehmend versagen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ki-betrug-explodiert
Guardrails Breached: The New Reality of GenAI-Driven Attacks

Jun 15, 2025 11:54 AM

Tags: ai, attack, cyber, deep-fake, hacking, malware, tool, vulnerability

From vibe hacking to malware development to deepfakes, bad actors are discovering more vulnerabilities to attack generative AI tools while also using AI to launch cyber attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/guardrails-breached-the-new-reality-of-genai-driven-attacks/
HR’s 2025 Guide to Preventing Interview and Onboarding Fraud

Jun 13, 2025 8:54 PM

Tags: ai, deep-fake, fraud, guide, identity, strategy, tactics, threat, tool
Cybersecurity Snapshot: NIST Offers Zero Trust Implementation Advice, While OpenAI Shares ChatGPT Misuse Incidents

Jun 13, 2025 7:54 PM

Tags: access, ai, attack, best-practice, breach, chatgpt, china, cloud, computer, computing, control, credentials, crime, cyber, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, encryption, endpoint, exploit, finance, fraud, government, guide, Hardware, identity, infrastructure, intelligence, Internet, iot, korea, law, least-privilege, linkedin, malicious, malware, military, ml, mobile, monitoring, network, nist, north-korea, openai, phishing, phone, programming, ransomware, risk, russia, scam, service, social-engineering, software, supply-chain, technology, theft, threat, tool, update, vulnerability, zero-trust

Check out NIST best practices for adopting a zero trust architecture. Plus, learn how OpenAI disrupted various attempts to abuse ChatGPT. In addition, find out what Tenable webinar attendees said about their exposure management experiences. And get the latest on cyber crime trends, a new cybersecurity executive order and more! Dive into six things that…
Why AI Needs Stronger Laws, Not Just Smarter Tech

Jun 12, 2025 7:54 PM

Tags: ai, cyber, deep-fake, framework, incident, law, risk

Andrea Isoni of AI Technologies on Certifications, Deepfakes and ISO 42001. AI misuse – from deepfakes to cyber incidents – continues to outpace regulation. Andrea Isoni, chief AI officer at AI Technologies discusses why stronger cyber laws, certification frameworks like ISO 42001 and risk-based prioritization are necessary to manage AI risks safely and compliantly. First…
From malware to deepfakes, generative AI is transforming attacks

Jun 10, 2025 6:55 PM

Tags: ai, attack, deep-fake, hacker, malicious, malware, open-source

Generative AI is even helping hackers trick open-source developers into using malicious code, according to Gartner. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cyberattacks-malware-open-source-phishing-gartner/750283/
From malware to deepfakes, Gen AI is transforming cyberattacks

Jun 10, 2025 5:55 PM

Tags: ai, cyberattack, deep-fake, hacker, malicious, malware, open-source

Generative AI is even helping hackers trick open-source developers into using malicious code, according to Gartner. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cyberattacks-malware-open-source-phishing-gartner/750283/
Corporate executives face mounting digital threats as AI drives impersonation

Jun 6, 2025 5:54 PM

Tags: ai, corporate, deep-fake, malicious, technology, threat

Malicious actors are using deepfakes and voice-cloning technology to target senior executives in both the workplace and personal spaces. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/corporate-executives-threats-ai-impersonation/750064/
Microsoft startet neues europäisches Sicherheitsprogramm

Jun 6, 2025 3:55 PM

Tags: ai, china, crime, crimes, cyber, cyberattack, cybercrime, cyberespionage, cyersecurity, deep-fake, governance, government, guide, infrastructure, intelligence, iran, LLM, microsoft, north-korea, open-source, ransomware, resilience, service, social-engineering, supply-chain, threat, ukraine, update, usa, vulnerability

Microsoft will die Cybersicherheit in Europa stärken.Microsoft warnt davor, dass sich Ransomware-Gruppen und staatlich geförderte Akteure aus Russland, China, dem Iran und Nordkorea in Umfang und Raffinesse stetig weiterentwickeln. Europa dürfe daher nicht zögern, seine Verteidigungsmechanismen zu stärken. Der Tech-Konzern will deshalb mit einer neuen Initiative bestehende Schutzprogramme erweitern und gezielt auf europäische Bedürfnisse eingehen.Das…
Smashing Security podcast #420: Fake Susies, flawed systems, and fruity fixes for anxiety

Jun 6, 2025 11:55 AM

Tags: access, data, deep-fake

A bizarre case of political impersonation, where Trump’s top aide Susie Wiles is cloned (digitally, not biologically, we think), and high-ranking Republicans start getting invitations to link up with “her” on Telegram to share their Trump pardon wishlists. Was it a deepfake? Or just someone with a halfway decent impression and access to a shady…
Cybersecurity Needs Satellite Navigation, Not Paper Maps

Jun 5, 2025 7:55 PM

Tags: access, ai, attack, automation, best-practice, breach, business, ceo, cloud, communications, computer, computing, cryptography, cyber, cyberattack, cybersecurity, data, data-breach, deep-fake, defense, encryption, endpoint, exploit, finance, firewall, framework, government, Hardware, healthcare, infrastructure, intelligence, Internet, leak, least-privilege, malicious, military, network, phishing, privacy, resilience, risk, saas, service, social-engineering, software, strategy, technology, threat, tool, vpn, vulnerability, zero-trust
Researchers Bypass Deepfake Detection With Replay Attacks

Jun 4, 2025 7:55 PM

Tags: attack, deep-fake, detection, group, international

An international group of researchers found that simply rerecording deepfake audio with natural acoustics in the background allows it to bypass detection models at a higher-than-expected rate. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/researchers-bypass-deepfake-detection-replay-attacks
Deepfake Scams Are Distorting Reality Itself

Jun 4, 2025 12:55 PM

Tags: access, ai, deep-fake, email, scam, tool

The easy access that scammers have to sophisticated AI tools means everything from emails to video calls can’t be trusted. First seen on wired.com Jump to article: www.wired.com/story/youre-not-ready-for-ai-powered-scams/
AI gives superpowers to BEC attackers

Jun 3, 2025 9:54 AM

Tags: ai, attack, authentication, automation, business, ceo, cloud, communications, corporate, credentials, crypto, data, deep-fake, defense, dmarc, email, exploit, finance, framework, fraud, gartner, google, group, identity, india, jobs, LLM, mail, malicious, malware, microsoft, mitigation, office, phishing, phone, scam, service, skills, social-engineering, spam, spear-phishing, strategy, technology, theft, threat, tool, training

The role of AI in business email compromise: Unlike traditional spam or phishing emails, which are designed to be as generic as possible, BEC fraud is highly targeted. Attackers must do a great deal of research about their targets to craft their messages and time their attacks for when their victim would be most susceptible,…
‘In der Security geht es vor allem um Resilienz”

Jun 3, 2025 9:54 AM

Tags: ai, awareness, backup, business, cio, ciso, cyber, cyberattack, cyersecurity, deep-fake, governance, group, ransomware, resilience, social-engineering, strategy, tool, training, vulnerability

Timo Wandhöfer verantwortet als Group CISO beim Metallverarbeiter Klöckner & Co den Bereich Informationssicherheit und Business Continuity Management (BCM). Klöckner & Co SERansomware-Attacken zählen nach wie vor zu den größten Cyberbedrohungen in der Industrie. Wie schützen Sie Ihr Unternehmen vor solchen Angriffen? Und worauf kommt es dabei besonders an?Wandhöfer: Ja, das ist richtig. Auch bei…
ThreatPlattformen ein Kaufratgeber

Jun 3, 2025 8:54 AM

Tags: ai, attack, automation, breach, cisa, cloud, crowdstrike, cyber, cyberattack, dark-web, deep-fake, dns, edr, exploit, finance, firewall, gartner, identity, incident response, intelligence, mail, malware, monitoring, network, open-source, phishing, risk, siem, soar, soc, threat, tool, vulnerability, zero-day

Threat-Intelligence-Plattformen erleichtern es, Bedrohungen zu durchdringen und wirksame Abwehrmaßnahmen zu ergreifen.Der erste Schritt zu einem soliden Enterprise-Security-Programm besteht darin, eine geeignete Threat-Intelligence-Plattform (TIP) auszuwählen. Fehlt eine solche Plattform, haben die meisten Security-Teams keine Möglichkeit, Tool-Komponenten miteinander zu integrieren und angemessene Taktiken und Prozesse zu entwickeln, um Netzwerke, Server, Applikationen und Endpunkte abzusichern. Aktuelle Bedrohungstrends machen…
ISMG Editors: Are We Less Secure Despite the AI Buzz?

May 30, 2025 5:55 PM

Tags: ai, deep-fake, group, update

Also: Deepfake Dangers with Veo 3; Claude Opus 4’s Manipulative Edge. In this week’s update, Information Security Media Group editors questioned whether we’re less secure today despite agentic AI and platformization, examined Veo 3’s alarming leap in deepfake realism, and dug into Anthropic’s powerful yet problematic Claude Opus 4. First seen on govinfosecurity.com Jump to…
Passwortlose Authentifizierung wird für CISOs immer wichtiger

May 30, 2025 12:55 PM

Tags: ai, authentication, business, ciso, credentials, cyber, cyberattack, deep-fake, gartner, mfa, microsoft, password, phishing, risk, risk-management, social-engineering

Selbst MFA ist vor raffinierten, KI-gesteuerten Phishing-Angriffen nicht sicher. Biometrische Verfahren gelten als vielversprechende Alternative.Die rasante Entwicklung von KI-Agenten eröffnet Cyberkriminellen neue Angriffsmöglichkeiten, die insbesondere für Chief Information Security Officers (CISOs) eine erhebliche Herausforderung darstellen. Automatisierte Angriffe, die von KI gesteuert werden, können herkömmliche Sicherheitsmaßnahmen wie Passwörter und Multi-Faktor-Authentifizierung (MFA) zunehmend unterlaufen. Trotz weit verbreiteter…