Deepfake Scams: Rising Threats and Corporate Vulnerabilities

Earlier this year, a deepfake video featuring Sundararaman Ramamurthy, the chief executive of the Bombay Stock Exchange, surfaced on social media in India. The video falsely depicted Ramamurthy giving stock investment advice, potentially misleading viewers into financial decisions based on fraudulent information. Ramamurthy emphasized the difficulty in assessing the video's impact but stressed the importance of preventing any financial harm from such deceptive content. The Bombay Stock Exchange responded by filing complaints and issuing warnings to the public about the dangers of fake videos.

This incident is part of a broader trend, as the use of deepfakes has surged by nearly 3,000% in recent years, according to Karim Toubba, CEO of LastPass. Toubba himself was targeted by a deepfake scam in 2024, where an employee received suspicious messages purportedly from him. The employee's vigilance prevented any damage, highlighting the importance of skepticism and verification in corporate communications.

Not all companies have been as fortunate. British engineering firm Arup fell victim to a sophisticated deepfake attack in 2024, resulting in a $25 million loss. An employee in Hong Kong was deceived into transferring funds after a video call with what appeared to be the firm's chief financial officer and other staff members, who were actually deepfakes.

The increasing realism of deepfake technology poses significant challenges for businesses. Matt Lovell, CEO of CloudGuard, notes that creating high-quality deepfake videos is becoming easier and cheaper, with costs ranging from $500 to $10,000 depending on the complexity of the attack. However, as deepfakes become more advanced, so do the tools designed to detect them. Verification software now analyzes facial expressions and blood flow to differentiate between real and AI-generated images.

Despite advancements in detection technology, the battle against deepfake fraud remains intense. Toubba describes it as a race between deploying and thwarting new technologies, with significant investment driving innovation in detection methods. However, Lovell warns that attack methods are evolving faster than defense mechanisms, raising concerns about the adequacy of current responses to the threat.

The rise of deepfake scams underscores the urgent need for skilled cybersecurity professionals. Stephanie Hare, a tech researcher, highlights the global shortage of experts in this field and the growing awareness among companies of the need to prioritize cybersecurity. As deepfake threats target high-level executives, businesses are increasingly focusing on securing their operations and enhancing collaboration between executives and cybersecurity teams.