Ledger / Oct 2024
Wiz employees get deepfake voice messages from CEO
Confirmed
CEO Assaf Rappaport described the attack on stage at TechCrunch Disrupt.
Attackers cloned the CEO's voice from a conference recording and sent voice messages to dozens of employees to harvest credentials. The conference voice differed from his everyday voice, which tipped staff off.
“Dozens of my employees got a voice message from me”TechCrunch
Sources
- Wiz CEO says company was targeted with deepfake attack that used his voiceTechCrunch · 28 Oct 2024 · secondary source
- Date
- Oct 2024
- Disclosed
- 28 Oct 2024
- Actor
- unknown (criminal), as attributed by TechCrunch
- Targets
- Wiz (cloud security), dozens of employees
- What the AI did
- Deepfake, Social engineering
- Model
- unspecified voice-clone/deepfake tool
- Model family
- Deepfake / voice
- Model basis
- stated by victim
- Autonomy
- assist
- Outcome
- Blocked; employees noticed it did not sound like the CEO. Credentials were the goal.