Hackers are combining deepfake videos and emulators to bypass biometric security solutions and infiltrate people's online services, a new study says.
According to the iProov report, the use of this technique by criminals jumped 353% between the first and second half of 2023.
“Generative AI has significantly increased the productivity levels of threat actors. These tools are relatively low cost, easily accessible, and capable of eliminating face-swapping and other forms of face-swapping that can easily fool humans. It can be used to create highly convincing synthetic media, such as deepfakes.''In addition to the eye, it also includes less sophisticated biometric solutions. This only increases the need for highly secure remote identity verification,” said Andrew Newell, Chief Scientific Officer at iProov.
Here's how it works: Fraudsters use artificial intelligence (AI) tools, some of which are cheap, off-the-shelf solutions, to create relatively convincing face swaps and deepfake videos. Next, create a virtual camera using an emulator. So, if a biometric solution requires a person to authenticate via a face scan, a fake camera with a face-swap video can be activated to trick the tool into authenticating.
Mobile platforms appear to be particularly vulnerable to this threat. Injection attacks against the mobile web more than doubled (255%) from the first half of 2023 to the second half of 2023. If you exclude emulators and look only at deepfake and face-swap attacks, the numbers get even worse. From the first half of 2023 to the second half of 2023, these attacks increased by 704%. Finally, the use of deepfake media combined with metadata spoofing (such as IP address spoofing) increased by 672% in the second half of last year.
The report also states that the hackers are working closely together to improve and evolve the technology. Apparently, there has been a “significant increase” in the number of groups exchanging information about bypassing human and video identification systems.
Of the groups identified by iProov analysts, nearly half (47%) were created in 2023, the company said.