Phishing Up 76% – Deepfake Attacks Surge: Is Your Org the Next Target?

Nearly half (46%) of businesses observed an increase in deepfakes and generative AI-related fraud last year, a new report from AuthenticID has found.

Additionally, phishing attempts increased by 76% in 2024, and more than 90% of cyberthreats were driven by social engineering.

The report also noted a rise in workplace-related fraud, including employee impersonation and account takeover.

“Workforce and employee fraud is increasing, as fraudsters are targeting various points along the employee identity lifecycle,” the researchers write. “Fraud can occur at any point in an employee’s tenure, merging both external and internal threats.

“Bad actors can use a wealth of stolen PII, synthetic identities, and AI technology to convince employers they’re a legitimate, qualified employee with a valid identity— and once they have access to your organization’s systems, they can commit significant fraud.

“With the median global loss due to employee fraud at $145,000 in 2024, making it the world’s most costly type of financial fraud, it’s crucial for organizations to ensure their workforce is who they say they are.”

The report points out that social engineering tactics are growing even more sophisticated as AI tools improve.

“Social engineering attacks aren’t new, but they’re entering a new era: hyper-personalization,” the researchers write.”As AI tools continue to develop, it’s increasingly easier for bad actors to hone in on believable, realistic human behaviors, emotions, and actions to not only mimic authentic individuals, but to manipulate victims’ behavior.

“The ability of attackers to impersonate legitimate individuals, organizations and/or requests is getting better, with a number of new tactics to aid them.”

Blog post with links:
https://blog.knowbe4.com/protect-yourself-navigating-the-increase-in-deepfakes-and-phishing-scams

Discover dangerous look-alike domains that could be used against you! 

Since look-alike domains are a dangerous vector for phishing attacks, it’s top priority that you monitor for potentially harmful domains that can spoof your domain.

Our Domain Doppelgänger tool makes it easy for you to identify your potential “evil domain twins” and combines the search, discovery, reporting, risk indicators, and end-user assessment with training so you can take action now.

Here’s how it’s done:

• Get detailed results of look-alike domains found similar to your primary email domain
• You can now quiz your users with your look-alike results
• Get a summary PDF that contains an overview of the look-alike domains and associated risk levels discovered during the analysis
• It only takes a few minutes to discover your “evil domain twins”!

PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/password-exposure-test-partner?partnerid=001a000001lWEoJAAW