{"id":1088,"date":"2024-06-18T13:08:49","date_gmt":"2024-06-18T07:38:49","guid":{"rendered":"https:\/\/mitigata.com\/blog\/?p=1088"},"modified":"2025-08-06T10:48:06","modified_gmt":"2025-08-06T05:18:06","slug":"ai-based-phishing-attack-using-deepfake-audio","status":"publish","type":"post","link":"https:\/\/mitigata.com\/blog\/ai-based-phishing-attack-using-deepfake-audio\/","title":{"rendered":"AI-Based Phishing Attack Using Deepfake Audio"},"content":{"rendered":"

As artificial intelligence (AI) continues to advance, cybercriminals are finding new ways to exploit this technology to carry out sophisticated attacks. A notable example of this is the use of deepfake audio to conduct AI-based phishing attacks. In this case study, we explore a real-life incident where cybercriminals used AI-generated voices to deceive the U.K.-based energy company, resulting in significant financial loss. This blog provides insights into the attack, outlines best practices for mitigation, and includes resources for reporting such incidents to authorities.<\/span><\/p>\n

How Criminals Are Using AI and Voice Deepfakes<\/b><\/h2>\n
    \n
  1. Cybercriminals are using generative AI and deep learning for creating convincing audio content for scams.<\/span><\/li>\n
  2. Voice samples are gathered from publicly available sources, such as interviews or social media posts.<\/span><\/li>\n
  3. Advanced AI algorithms like neural networks and speech synthesis models are used to clone these voices.<\/span><\/li>\n
  4. Sophisticated generative adversarial networks (GANs) produce synthesized audio.<\/span><\/li>\n
  5. This audio is used to impersonate trusted individuals in phishing calls.<\/span><\/li>\n
  6. Criminals create urgency and pressure to trick victims into transferring money or sharing sensitive information.<\/span><\/li>\n
  7. The realistic nature of these deepfake voices, enhanced by text-to-speech (TTS) and voice conversion (VC) techniques, makes it hard for targets to recognize the scam<\/span>.<\/span><\/li>\n<\/ol>\n

    For more info: How Cybercriminals Exploit AI: Voice Cloning & Deepfakes Explained<\/a>
    \n<\/b><\/p>\n

    Incident Overview<\/b><\/h2>\n

    The Attack<\/b><\/h3>\n

    In March 2024, a U.K.-based energy company fell victim to a deepfake audio attack, resulting in a financial loss of US$243,000. The fraudsters used AI software to mimic the voice of the chief executive of the company’s Germany-based parent company. By doing so, they convinced the U.K. company’s CEO to make an urgent wire transfer to a supposed supplier in Hungary.<\/span><\/p>\n

    Execution<\/b><\/h3>\n

    The cybercriminals called the U.K. company’s CEO, impersonating the parent company’s CEO. They demanded an urgent wire transfer, assuring the CEO of a reimbursement. Once the money was transferred, it was moved to an account in Mexico and then dispersed to various other locations, complicating the identification of the fraudsters.<\/span><\/p>\n

    Follow-up Attempts<\/b><\/h3>\n

    The fraudsters made subsequent calls to request additional transfers, claiming that the first payment had been reimbursed. However, the U.K. company\u2019s CEO grew suspicious, especially when the calls were made using an Austrian phone number, and refused further transactions.<\/span><\/p>\n

    Identifying AI-Based Phishing Attacks<\/b><\/h2>\n

    Behavioral Indicators<\/b><\/h3>\n