Scammers can now harvest your social media photos, leaked personal information and even snippets of your voice from TikTok to effectively 'recreate you' online, a leading cyber expert has warned.
asserted
expert → harvest → you
Former Google executive Richard Mallam said rapid advances in AI were making it frighteningly difficult to distinguish a real person from a sophisticated digital impersonation, opening the door to a new wave of identity fraud.
asserted
it → say → fraud
He said the prospect of criminals using AI to effectively recreate their victims was among the scenarios that 'keep me up at night'.
asserted
that → say → night
'They can find personal information on you that's been leaked...
asserted
that → find → you
They can take imagery from your social media, they can take a clip of voice, your voice from TikTok, and they essentially, using AI deepfake tools, can recreate you
asserted
they → take → you
,' he told the Daily Mail.
asserted
he → tell → Mail
It's very, very difficult for the business to understand whether that's you or not, or a deepfake of you.'
asserted
that → understand → you
Mr Mallam said AI could allow criminals to effectively create a digital twin of a victim and use their identity to apply for financial products and other services.
uncertain
criminals → say → products
'We are not only seeing a rapid increase in the volume of scams but sophistication thanks to AI including the ability to re-create a person's ID, effectively making a digital twin to then sign up to different services, operating on that person's behalf from leasing vehicles to taking out loans and credit cards.'
asserted
twin → see → loans
He warned that the consequences could be devastating, with some victims potentially unaware their identity had been stolen until a bill or debt notice arrived.
uncertain
bill → warn → ?
Richard Mallam (Ppictured) said rapid advances in AI were making it frighteningly difficult to distinguish a real person from a sophisticated digital impersonation
AI isn't just making scams more convincing, it was allowing criminals to target vastly more people at once
'
asserted
criminals → say → people
Scammers can originate a loan or a payment plan on your behalf using data, face and voice that they've stolen from you,' he said.
asserted
he → originate → you
You just wake up one day and you have a debt notice.
asserted
you → wake → notice
A lot of people won't know they've been scammed until they get the bill.'
asserted
they → know → bill
Mr Mallam said financial institutions were already fielding fraudulent calls from criminals using AI bots in attempts to take over customers' accounts.
asserted
institutions → say → accounts
'Financial institutions like banks as well as super funds are receiving thousands of fraudulent calls every week from hackers using AI bots to try and take over customers' bank accounts,' he said.
asserted
he → receive → accounts
He warned Australians against staying on the phone to toy with suspected scammers because criminals could potentially capture their voices.
uncertain
criminals → warn → voices
'I think people sometimes like talking to scammers on the phone...
asserted
people → think → phone
Don't do that,' he said.
asserted
he → do → that
'They could be cloning your voice.'
uncertain
They → clone → voice
He claimed scammers might need only a small amount of information to attempt to defeat existing verification systems.
uncertain
scammers → claim → systems
Government services such as the ATO and Medicare will become increasingly attractive targets because of the vast amounts of sensitive personal and financial information they hold
'
asserted
they → become → information
All they need is a few seconds of your voice, your bank details and access to your phone or email to confirm the bank's verification and they are in.
asserted
they → need → verification
AI supercharging scams
asserted
AI → supercharge → scams
Mr Mallam said AI wasn't just making scams more convincing, it was allowing criminals to target vastly more people at once.
asserted
criminals → say → people
'It used to be a sort of one-to-one attack vector, so one person to one attack.
asserted
It → use → one
Now it can be one person coordinating tens of thousands, if not more, agents to run these scams concurrently,' he said.
asserted
he → coordinate → scams
'They're able to hit more people, and they're also able to hit more businesses with much more sophisticated attacks.
asserted
they → hit → attacks
Mr Mallam said cybercrime was increasingly being driven by organised criminal networks, including so-called 'scam farms', where large groups of people are used to target victims.
asserted
groups → say → victims
'People will dupe someone to come, and they'll say, 'Here's a job of a lifetime,' and essentially they'll send them into a farm with lots of people who will hit the phones and try and scam, typically people in richer countries,' he said.
asserted
he → dupe → countries
He said more sophisticated hackers could also work with organised criminals under profit-sharing arrangements.
uncertain
hackers → say → arrangements
Despite the growing sophistication of scams there are simple steps Australians could take to make themselves harder to target
'
uncertain
themselves → grow → scams
The sophisticated hackers who have access to advanced AI tools will essentially operate on behalf of organised crime gangs or state actors as well, to sort of coordinate mass attacks.'
Mr Mallam said the growing threat meant banks, governments and other organisations holding sensitive personal information needed to shoulder more responsibility for protecting customers, rather than expecting individuals to identify increasingly sophisticated scams themselves.
asserted
individuals → have → scams
He fears AI could eventually enable cyber attacks on a far greater scale, including attacks affecting financial institutions and their customers.
uncertain
AI → fear → institutions
'You log out of your net banking, maybe at night, you log back in in the morning, and you're missing five grand or 100 bucks or whatever is there,' he said.
asserted
he → log → grand
But he stressed that scenario had not yet arrived.
asserted
scenario → stress → ?
Mr Mallam also fears government services such as the ATO and Medicare will become increasingly attractive targets because of the vast amounts of sensitive personal and financial information they hold.
asserted
they → fear → information
'They're pillars of Australian society and the Australian economy,' he said.
asserted
he → say → society
'They've got huge amounts of personal information, and that's an extremely attractive honeypot for a scammer.'
asserted
that → get → scammer
He warned that without a dramatic strengthening of cybersecurity defences, major institutions could eventually be breached.
'
uncertain
institutions → warn → defences
…and 8 more, not listed.