Data theft of credit or debit cards, spoofed links in online purchases on various platforms, and phishing attempts via emails or social media apps are some of the most common types of scams. However, cybercriminals are opting for increasingly creative methods, including the use of phone numbers they have acquired, possibly even yours, dear reader. Unfortunately, artificial intelligence also aids these mechanisms. So, what situations should raise our awareness?
Apparent Mistake
One of the methods used by cybercriminals is to intentionally stage an alleged mistake using SMS or WhatsApp messages. The sender cleverly initiates a conversation with the receiver about a specific matter. The surprised recipient notices the mistake but may continue the conversation because the topic seems intriguing. For example, the initiating message could be, “Hi Tom, let me know if you’re still interested in that part-time job. Please get back to me. We pay extra, 100 PLN/h, we have the last few spots left.” Sometimes, the recipient, intrigued by the context, engages in a discussion that takes an unexpected turn. In the end, the scammer may ask for a small financial help or to click on a link.
Beware of Phone Calls from the Bank
Cybercriminals often impersonate bank employees. Calling from unknown numbers, they try to lower the receiver’s guard by invoking various emotions. Sometimes they report an attempted loan on your account. Other times, they may offer excellent time-limited deposits or leasing deals. In each case, they prompt the receiver to click a link – key to either preventing the attempted scam or initiating the special offer. Logging into an external site, strikingly similar to the bank’s page, leads to data theft. While the media has widely reported these types of scams, it’s worth noting that cybercriminals continue to refine their methods, and artificial intelligence may be used to conduct phone conversations. This can make the dialogue seem more logical, the arguments more understandable, and the scam harder to detect. It is estimated that since the release of ChatGPT in November 2022, there has been nearly 1300% increase in scams based on artificial intelligence (data from Help Net Security based on Enea reports).
Business Meeting? Could Be a Deepfake
However, voice calls are not the only communication methods that can be manipulated by artificial intelligence. AI-based scams have also become dangerous in video meetings.
“In the business world, after the COVID-19 pandemic has driven many business meetings online, we have observed a new harmful phenomenon – the use of deepfakes impersonating partners, boards, or company directors. In February, the world learned about an employee in a Hong Kong company who transferred over 25 million dollars to an account of a supposed CFO of a potential UK contractor after an online meeting. In reality, he spoke to a virtually created image based on archived videos available online. The AI created deepfake appeared unnaturally natural and convincing, and the business meeting ended successfully. Moreover, the entire correspondence around the business meeting seemed so credible that a transaction was made,” explains Kamil Sadkowski, an analyst at the ESET antivirus laboratory.
Worryingly, cybercriminals also impersonate boards and company management by holding fictitious meetings with employees and issuing commands. This is an easy way to intercept data, make unfavorable decisions, and consequently, suffer financial losses.
Number Theft – How Does It Happen?
All platforms, apps, or service centers storing personal data and phone numbers should have adequate protection. However, reality can disappoint, so keep in mind that giving your phone number to numerous apps increases the chances of potential leaks. The internet is full of cybercriminals searching apps for security gaps or purchasing vast databases of phone numbers. How does your number end up in the hands of cybercriminals?
Public Sources: Lack of proper privacy settings on social media platforms or job search apps can expose your phone number to everyone.
Account Theft: Online services require phone numbers, e.g., for identity verification, placing orders, or authentication. Weak passwords or data breaches from app providers can lead to account and phone number theft.
Auto Dialers: Automatic dialing tools call random numbers, most often to confirm the number is in use and then add it to potential target lists.
Postal services: Be aware that received parcels or letters typically have visible email addresses, and in some cases, phone numbers as well. What happens if unauthorized individuals search through your discarded trash?
Source: https://managerplus.pl/uwazaj-na-oszustow-numer-telefonu-cenniejszy-niz-myslisz-79167
