Artificial Intelligence Security Risks

In recent years, AI has been widely developed and used in everyday life in ways we may not even be aware of. AI is a powerful tool and is rapidly changing our world. It can be used for good or bad intentions, and this power comes responsibility! In the field of Cybersecurity, what role does AI play and what should we pay attention to when using AI? 

Closed captioning (subtitles) in multiple languages, can be enabled by using the CC icon. Select your preferred language using the GEAR icon.

AI in Cybersecurity:

It's critical to comprehend how cyberattacks affect many facets of our daily life and how we may use AI responsibly without endangering ourselves.

Generative AI (GenAI): Both cyberattackers and cyberdefenders employ AI extensively these days. AI can help for businesses to enhense Cybersecurity defenses, such as Advanced Threat Detection but also be leveraged by hackers to create highly targeted phishing emails/messages to trick victims. Scammers could use AI to colone the voices and videos of someone you know. Don't engage with the caller, for the unexpected calls, you can call them back by searching the phone numbers on the orgamization's official website. 

Data Privacy: When using public commericial AI engine tools, never input any business data and Personally Identifiable Information (PII), such as SSN, Driver License Number, and personal financial information. To avoid data breaches, be mindful of the data you share with AI tools. Review and follow your organization and state's privacy policies.

Create Security code with families: Many AI scam calls are set up through voice cloning. Families and relatives can get together and create a code word or phrase. Don’t oversharing family information online. 

Stay Alert and Report for Suspicious Activities: If you see any suspicious activities or attempts, notify your local authorities to file a complaint. Keep and record evidences of the incident and its suspected source if you can. 

Resourced available to you

AI Scams and frauds

This extensive list covers a wide range of fraudulent activities that target individuals and businesses alike. Staying vigilant and informed is crucial for protection against these types of scams and frauds.

• Deepfake Scams:  Scammers use deepfakes to impersonate trusted figures or loved ones in scams, including blackmail and fraud.

• Automated Intelligent Powered Phishing:  Scammers create algorithms can generate convincing phishing emails or messages by analyzing vast amounts of data on individuals, making these fraudulent communications more personalized and harder to detect.

• Synthetic Identity Fraud: Scammers create fake identities by synthesizing realistic personal information, photographs, and documents. These identities can be used to open fraudulent accounts or make unauthorized transactions.

• Chatbot Scams: Scammers use intelligent driven chatbots on fake websites or customer service platforms. These chatbots can convincingly interact with victims to extract personal information or financial details.

• Voice Impersonation: Using special tools to clone voices, scammers can impersonate family members, company executives, or authority figures in voice scams, convincing victims to transfer money or provide sensitive information.

• Investment and Trading Scams: Promoting fraudulent based investment platforms or trading bots that promise high returns with no risk. These platforms often manipulate data or results to entice investments in non-existent or worthless schemes.

• Fake Product Scams: Selling non-functional or nonexistent software or services, often targeting businesses looking to integrate automated intelligent tools into their operations.

• Software Generated Content Scams: Using Intelligent software to create fake reviews, testimonials, or social media profiles to promote scams, manipulate opinions, or sell fraudulent products and services.

• Romance Scams: Leveraging automated software to manage and operate numerous fake profiles on dating sites, engaging victims with automated messages to build relationships and eventually scam them out of money.

• Automated Social Engineering Attacks: BOT software can analyze vast amounts of personal data from social media and other sources to craft highly personalized and convincing social engineering attacks.

• Fraudulent AI Education and Courses: Offering fake or grossly exaggerated AI training programs, certifications, or education platforms, scamming individuals seeking to learn about AI.

• Generated Malware: Using automated tools to create or evolve malware that can better evade detection by security systems, making it harder to protect against attacks.

• Fraudulent Crowdfunding for Technology Projects: Launching crowdfunding campaigns for innovative  technologies or projects that do not exist or are not intended to be developed.

While AI offers incredible potential for positive impact, its misuse in scams highlights the importance of vigilance and critical evaluation of AI-related offers, communications, and investments.

Protect Yourself from AI Fraud:

• Be Cautious of Unexpected Contact: Be cautious of the unknown number. If you receive a call or message you are not expecting, don't engage with the caller. Sometimes scammers pretend to be from an agency or organization you know to gain your trust. You can search the contact of the organization listed on their official website and call them back.  Sometimes the scammer generate a sense of urgency, this is psychological warfare tactics many scammers use to pressure victims into rushed decisions. Consider whether to answer unexpected calls from unknown phone numbers

• Never share Personal Information online: When you use the AI tool or online chat tool, do not share unnecessary data and always removing PII (Personally Identifiable Information), such as SSN, Driver's license, and financial information. And make sure to review and follow your Company and State's Privacy Policies.

• Set your social media accounts to private instead of public: Oversharing on social media can help scammer learn important details about you and your families. Remove personal information online. 

• Report Suspicious Activity: If you encounter a suspected AI fraud attempt, report it to the relevant platform or organization. This helps them track and prevent similar scams in the future.

More information about AI Security:

• OWASP AI Security and Privacy Guide