c/tech · by bouncing@partizle.com · 3y

Torrent of image-based phishing emails are harder to detect and more convincing

https://arstechnica.com/security/2023/06/torrent-of-image-based-phishing-emails-are-harder-to-detect-and-more-convincing/

It does seem like sooner or later, if someone is able to build a reliable AI model of my face and voice, they could even phish my own relatives by video call.

Seems like a Philip K. Dick novel—objective reality is something you could only see around you, while the machine would be completely untrustworthy.

4 points · 1 comments · view on lemmy.world

1 Comments

flanksteakninja@partizle.com · 2 pts · 3y

The emails Inky detected instruct the employee to resolve security issues such as a missing two-factor authentication enrollment or to change a password and warn of repercussions that may occur if the recipient fails to follow through. Those who take the bait and click on the QR code are led to a site masquerading as a legitimate one used by the company but it captures passwords and sends them to the attackers.

An attack that would be protected against with a yubikey, webauthn, or passkey.