Artificial Intelligence (AI) is being utilised by online criminals to target their victims, and according to the National Cyber Security Centre, many threat actors are using AI in their cyber-attacks. AI undoubtedly has major societal and business benefits. It must be developed, deployed, and operated securely and responsibly to enjoy the benefits whilst minimising risk.
Cyber criminals are using AI to come up with new and more efficient ways to use language models such as ChatGPT, including fake images, audio and video, which allows them to create convincing “deepfake” scams and emails. This could trick unsuspecting staff into paying invoices or changing bank details for suppliers that claim to be official suppliers or members of your organisation.
How to keep you and your business safe from AI scams and attacks
- Be suspicious of anything you see in your inbox or online. Always take five minutes to assess whether the email or content is genuine before clicking, downloading, or opening any attachments. Make sure you verify any correspondence if you are unsure, with the sender.
- Never transfer money to a supplier, business, or charity online without verification to confirm the payment request is genuine. However, people’s voices can also be faked using AI, so if calls seem odd or out of place, double-check this in person via calling their telephone number yourself to speak with them, you initiate the call if you can. Or if you know them, ask for personal information that only they would know to allow you to verify their identity, you might even set up a verbal password or passphrase to ensure you are speaking to a genuine person, not an audio deepfake
For further guidance on protecting you and your business please contact: [email protected]
To stay up to date with the ever-changing digital landscape and security threats, sign up for our free core membership
The NEBRC is a Police led non-profit organisation that seeks to educate, inform, and support businesses across the UK on how to protect their business online through good cyber security practices.