Description: AI-generated deepfakes were reportedly used in the "HTML/Nomani" phishing campaign to mimic legitimate platforms like booking services and lured victims into investment scams. These scams allegedly leveraged realistic fake content to deceive users on social media for the purposes of financial fraud. This campaign was part of the rising misuse of AI in cybercrime during the second half of 2024.
Editor Notes: For more information, see the full ESET threat report, including how Lumma Stealer malware reportedly surged in targeting macOS and mobile users, and how RansomHub ransomware allegedly employed AI-driven techniques to enhance evasion and effectiveness, at the following URL: https://web-assets.esetstatic.com/wls/en/papers/threat-reports/eset-threat-report-h22024.pdf. See also: Incident 870: Meeten Malware Campaign Reportedly Undermines Web3 Security Using AI-Legitimized Branding.
Entidades
Ver todas las entidadesAlleged: Unknown deepfake technology developers developed an AI system deployed by scammers , HTML/Nomani y Fraudsters, which harmed Phishing victims , Booking.com customers , Booking.com , Airbnb users y Airbnb.
Sistemas de IA presuntamente implicados: Deepfake generation tools , AI-powered cryptostealers y AI-enhanced ransomware systems
Estadísticas de incidentes
Risk Subdomain
A further 23 subdomains create an accessible and understandable classification of hazards and harms associated with AI
4.3. Fraud, scams, and targeted manipulation
Risk Domain
The Domain Taxonomy of AI Risks classifies risks into seven AI risk domains: (1) Discrimination & toxicity, (2) Privacy & security, (3) Misinformation, (4) Malicious actors & misuse, (5) Human-computer interaction, (6) Socioeconomic & environmental harms, and (7) AI system safety, failures & limitations.
- Malicious Actors & Misuse
Entity
Which, if any, entity is presented as the main cause of the risk
Human
Timing
The stage in the AI lifecycle at which the risk is presented as occurring
Post-deployment
Intent
Whether the risk is presented as occurring as an expected or unexpected outcome from pursuing a goal
Intentional
Informes del Incidente
Cronología de Informes
Los investigadores de ciberseguridad están llamando la atención sobre un nuevo tipo de estafa de inversión que aprovecha una combinación de publicidad maliciosa en las redes sociales, publicaciones con la marca de la empresa y testimonios e…
Variantes
Una "Variante" es un incidente que comparte los mismos factores causales, produce daños similares e involucra los mismos sistemas inteligentes que un incidente de IA conocido. En lugar de indexar las variantes como incidentes completamente separados, enumeramos las variaciones de los incidentes bajo el primer incidente similar enviado a la base de datos. A diferencia de otros tipos de envío a la base de datos de incidentes, no se requiere que las variantes tengan informes como evidencia externa a la base de datos de incidentes. Obtenga más información del trabajo de investigación.
Incidentes Similares
Selected by our editors
Did our AI mess up? Flag the unrelated incidents
Updates on Our Security Work in Ukraine
· 4 informes
The DAO (organization)
· 24 informes
Incidentes Similares
Selected by our editors
Did our AI mess up? Flag the unrelated incidents
Updates on Our Security Work in Ukraine
· 4 informes
The DAO (organization)
· 24 informes