An Ohio man was sentenced to 15 years after cyberstalking multiple victims and using both real and AI-generated sexually explicit imagery, alongside threats of violence. The case describes a real-world harassment and extortion workflow using repeated calls/texts and threatening to publish non-consensual intimate imagery.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this text: "I have images of you and I’ll post them unless you do what I say." That’s AI deepfake sextortion. In a real case, a victim and her mother got 31 calls and texts in nine days, threats of sexual assault and so‑called "AI images" of her changing at home and in the bathroom. The next step is posting those real or AI‑generated images on abusive sites under multiple anonymous accounts. That’s exactly what led to a 15‑year sentence under the new Take It Down Act. If anyone ever threatens to share intimate or AI‑made images of you or a coworker, do not reply or negotiate, screenshot everything and report it immediately to security or HR.
This weekly roundup describes several real social-engineering campaigns, including fake government-payment posts that compromised thousands of Bluesky accounts and mobile scams disguised as community activities. It also documents AI-generated bank-helpdesk calls that persuaded victims to install an…
Dutch police are investigating ShinyHunters after a phone-based social engineering incident helped attackers break into Odido, the Netherlands’ largest mobile provider. Investigators say the caller persuaded an employee to log into a spoofed website, which was then used to steal data on more than…
The article describes a common fraud pattern where scammers impersonate police, government officials, or other trusted authorities over the phone to pressure victims into paying via a Bitcoin/crypto ATM. The victim is told their money is at risk, instructed to withdraw cash, and then directed to…
The article describes how scammers use AI voice cloning to impersonate a loved one during a phone call and pressure relatives into paying money (often framed as a kidnapping emergency). It recommends a practical defense: a pre-agreed family “safe word” and a simple verification process (hang up and…
This bulletin describes multiple real-world social engineering campaigns where attackers impersonate IT support or use trusted-looking sharing and “Allow” prompts to gain access. Several campaigns abuse Microsoft Teams and document-sharing lures to trick employees into installing remote tools or…
The article explains how generative AI is making phishing and impersonation more convincing, so “bad grammar” is no longer a reliable warning sign. It cites a real case in Hong Kong where fraudsters used deepfake video to impersonate senior colleagues on a video meeting and tricked a finance worker…
