What attackers do with these tools.
CONVINCING PHISHING
Well-written, personalised, in any language, at volume.
The indicators people were trained to spot no longer apply.
VOICE CLONING
A short recording is sufficient to produce convincing synthetic speech.
Used for fraud: a call from an apparent director authorising a payment.
WHAT PROTECTS AGAINST IT
Verifying payment instructions by an independently obtained number, always.
Never by replying to the message or calling the number provided.
BUSINESS EMAIL COMPROMISE
Generated correspondence matching a real person's style, requesting a payment change.
The most financially damaging attack pattern for small businesses.
FABRICATED DOCUMENTS
Convincing invoices, identification and correspondence.
WHAT TO ESTABLISH
A verification procedure for any change to payment details A second person for payments above a threshold Staff training that reflects current methods
FOR YOUR BUSINESS
The single most valuable control: no payment details change without a phone call to a known number.
