Loading story…
A new study from Australia’s national science agency demonstrates that attackers can now generate convincing synthetic voices from just a photo of a person’s face, bypassing traditional voice authentication systems. The FOICE (Face-to-Voice) technique leverages AI to estimate vocal traits from facial features, enabling scalable impersonation attacks. In tests, this method successfully fooled WeChat Voiceprint authentication in nearly all attempts after several tries, and current deepfake detection systems largely failed to identify the synthetic audio as fake, highlighting a significant gap in existing security controls.
Meanwhile, law enforcement agencies are grappling with the rapid evolution of AI-powered cyber threats. The FBI has acknowledged that AI is narrowing the gap between cybercriminals and nation-state hackers, but faces challenges in adopting AI tools due to the sensitivity of its data. In Australia, federal police are developing AI systems to interpret online slang and emojis used by decentralized crime networks, which are increasingly leveraging technology to coordinate and glorify criminal activity. These developments underscore the urgent need for improved AI-driven defenses and detection mechanisms to counter both technical and social aspects of emerging cyber threats.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
An FBI official said AI has lowered barriers for cybercriminals, allowing them to achieve capabilities that previously were more associated with nation-state actors. The remarks were reported on 2025-10-30.
Security reporting highlighted that AI systems can use a person's photo to generate a convincing cloned voice, increasing risks to voice-authentication systems and fraud defenses. The warning was published on 2025-10-30.
Australian Federal Police Commissioner Reece Kershaw said the AFP is building AI tools to help investigators understand emoji and coded language used by so-called 'crimefluencers' and other offenders online. The statement was reported in coverage published on 2025-10-29.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
nextgov.com
Open sourcehelpnetsecurity.com
Open sourcego.theregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026
Researchers and security practitioners warned that attackers are using widely available AI tools to make social engineering more personalized and scalable. McAfee found that free vision models could infer where travel photos were taken with high accuracy, with **Gemma3 27B** identifying the correct city and country in 87% of tests and **Qwen3 VL 30B** reaching 91%, giving scammers enough location context to craft convincing phishing lures from social media posts. Separate reporting also described how public profiles, posted media, and voice samples can be harvested to build believable impersonation campaigns over phone and audio channels. New research on AI voice phishing found that the effectiveness of scam calls depends more on the **script and persuasiveness** than on whether a voice sounds perfectly human. In a study of 4,100 U.S. adults, suspicion of AI-generated voices was common but detection accuracy was poor, and familiarity with AI tools did not significantly improve performance; across five scam scenarios, 16.5% of participants said they would comply or might comply, while a fake-relative-in-trouble scenario reached 36.1%. The findings indicate that defenders should emphasize **out-of-band verification** and stronger identity-proofing rather than relying on users to spot synthetic voice artifacts or other obvious signs of AI use.
Jul 17, 2026
Artificial intelligence is increasingly being leveraged by both cybercriminals and law enforcement, fundamentally transforming the landscape of cybercrime and digital forensics. AI-powered tools are now capable of detecting cyber threats by recognizing malicious activity patterns and supporting digital forensic investigations, making it easier for specialists to identify relevant evidence such as images and chat logs while minimizing exposure to unrelated or distressing material. However, the same AI technologies are also being exploited by threat actors to create highly realistic deepfakes—synthetic images, videos, and voices—that are difficult to distinguish from genuine content. These deepfakes are used in a variety of malicious campaigns, including misinformation, fraud, identity theft, and sophisticated social engineering attacks. State-sponsored groups from countries like Iran, China, North Korea, and Russia have been documented using AI-generated media for phishing, reconnaissance, and information warfare, with specific examples including Iranian actors impersonating officials and North Korean hackers using fake job interviews to infiltrate organizations. The rapid evolution of deepfake technology has led to the development of advanced AI-powered detection tools that utilize machine learning, computer vision, and biometric analysis to identify manipulated content before it can cause harm. Despite these advances, challenges remain: AI models can struggle with altered media, such as deepfakes, and require constant retraining with supervised, high-quality data to avoid errors and hallucinations. Public concern over the misuse of deepfakes is growing, with surveys indicating that half of young people in the UK fear non-consensual deepfake nudes, and a significant portion of the population worries about financial losses, scams, and unauthorized access to sensitive information facilitated by AI-generated content. The emotional and psychological risks associated with malicious deepfakes are substantial, particularly when individuals or their families are targeted. There is also a notable gap in public understanding of deepfake threats, with a portion of the population unable to identify deepfake calls, underscoring the need for greater education and awareness. Organizations are increasingly adopting AI-powered security awareness training to help employees recognize and respond to evolving social engineering tactics. The dual use of AI in both cybercrime and its detection highlights the urgent need for ongoing collaboration, improved training, and the responsible development of AI technologies to mitigate risks while enhancing digital forensics capabilities. As AI continues to advance, both the sophistication of attacks and the tools to counter them are expected to grow, making vigilance and adaptability essential for cybersecurity professionals and the public alike.
Jun 29, 2026