Scams are Getting Smarter and Faster with AI's Help
Sophisticated scam campaigns that used to take cybercriminals weeks to set up can now pop up in minutes, Microsoft is warning. The reason? Generative Artificial Intelligence (GenAI) has cut down on the time needed to prepare a sophisticated internet scam.
Lowering the Barrier for Entry
The tools that emerged a few years ago have lowered the barrier for entry allowing even rookie fraudsters to prepare and run advanced campaigns. Cybercriminals are using GenAI for more than “just” phishing email copy. They create deepfakes (usually fake videos of celebrities endorsing a project), and create AI-generated “sham websites” mimicking legitimate businesses.
Phishing and Fraud
“What used to take scammers days or weeks to create will now take minutes,” Microsoft warned. But at the end of the day, this is still “just” phishing and fraud - people can mitigate the risk by taking it slow on the internet.
The best thing to do is not to be fooled with “limited-time” deals and countdown timers, to only click on verified ads (many scam sites spread through AI-optimized social media ads), and to be skeptical of social proof (scammers can use AI-generated reviews, influencer endorsements, and testimonials to exploit trust people have in social media).
Users should never provide personal or financial information to people reaching out via unsolicited SMS or email messages. “You should never provide a Social Security number, banking details, or passwords to an unverified employer,” it said.
Paying for a job opportunity is almost always a red flag. The best advice is usually the simplest: if it sounds too good to be true, it probably is.
AI and Cybersecurity
Artificial intelligence will make internet fraud even more dangerous, but with a little common sense and a little care - it doesn’t have to be successful. Microsoft's latest Cyber Signals report on AI-assisted scams highlights the growing threat of cybercrime that uses GenAI.
The use of deepfakes and fake websites by scammers is becoming increasingly sophisticated. Scams are not limited to phishing; they can take many forms, including online job scams, investment scams, and romance scams.
How to Stay Safe
- Be cautious with unsolicited messages or calls, especially those asking for personal or financial information.
- Verify the authenticity of websites or businesses before providing any sensitive information.
- Use reputable sources for job opportunities and investment advice.
- Be skeptical of social media ads that seem too good to be true.
The use of AI in cybercrime is a growing concern, but by being aware of the risks and taking precautions, people can protect themselves from scams. The key is to remain vigilant and cautious when interacting with unknown sources online.
A Guide to Authenticator Apps
Here are some tips on how to choose an authenticator app that works best for you:
- Look for apps that offer two-factor authentication (2FA) or multi-factor authentication (MFA).
- Choose an app that is compatible with your device and operating system.
- Read reviews and compare features before selecting an authenticator app.
A good authenticator app should be able to generate one-time passwords (OTPs) or time-based OTPs, provide secure storage of sensitive data, and offer real-time monitoring and alerts for suspicious activity.
Password Managers
Here are some top-rated password managers that you can consider:
- LastPass
- 1Password
- Dashlane
- KeePass
A good password manager should offer features like secure password storage, password generation, and auto-fill capabilities. Look for apps that have robust security measures in place to protect your sensitive information.