COLUMN GenAI enabled cybercrime

There is an alarming trend of threat actors exploiting advanced artificial intelligence models to enable, enhance or create cybercrime campaigns. They are using legitimate GenAI offerings as well as creating their own, and the sophistication of these operations makes even the most informed very vulnerable to AI enhanced cyber threats.

Using GenAI criminals and nation state threat actors can scale their cybercrime operations to higher levels. They can automate the creation of malware and phishing templates and believable faked live video meetings, as well as contact a larger number of potential victims with very little human involvement.

Cybercrime-as-a-service marketplaces are offering GenAI constructed phishing kits and ransomware malware kits at low cost, and are also providing manipulated GenAI models for other criminals to use. There are deep fake and other photo and live video masking techniques created by GenAI that allow for the manipulation of imagery to spoof company executives as part of the modern approach to business email compromise fraud. This technology also allows for the creation or manipulation of images for use in child exploitation or child sexual abuse and is used to ‘nudify’ images to publicly embarrass, exploit or shame individuals.

GenAI is making it easier for malicious actors to create large volumes of believable material for their illicit use. However, campaigns are still largely relying on tricking humans or exploiting information or imagery discovered about their targets. This means that the basic rules of online security hygiene still apply.

• Be considered and cautious about what images or information about yourself or others you share online.

• Help children in your care understand safe digital practices and help them to engage with the ideas of privacy and security from a young age.

• Use multifactor authentication and advanced credential practices, such as passkey, where possible.

• Verify the veracity of requests for information or payments before actioning them.

• Understand the types of cyber-enabled crime that are out there.

• Know where to go for help if you or someone you know is a victim of cybercrime.

The volume and sophistication of cybercrime campaigns will only increase with the use of GenAI. So, as a community, we need to stay vigilant.

Stay safe everyone.

www.linkedin.com/in/amandajane1 www.empressbat.com