Spanish police arrested a man accused of using a deepfake face overlay and a forged national ID to pass a certificate provider’s live video identity checks. The goal was to obtain digital signatures that could be used for financial fraud, with police reporting 38 attempts affecting more than 30 people.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine you’re on a live video call: “Hi, I’m here for my video verification to obtain my electronic certificate.” Looks routine, right? In Spain, police say one man used AI to deepfake his face to match a forged national ID, trying to pass these video checks and grab digital signatures for financial fraud, until his digital mask glitched and his real face flashed on screen. Here’s what to watch for: a face that looks unnaturally masked or briefly glitches at the edges, over-the-top lighting and colored bulbs to make ID holograms look ‘perfect,’ and repeated verification attempts coming from VPN-like, anonymized connections. If you see even a tiny deepfake-style glitch or staged lighting on the ID, don’t approve it, pause the session and trigger your step-up verification path immediately.
U.S. authorities sanctioned people supporting a real North Korean scheme that placed workers in legitimate U.S. businesses using false identities and fabricated job applications. The workers reportedly used AI to tailor resumes and cover letters, create profile photos, and even conceal their…
Employers are encountering fraudulent job candidates who use real-time face swaps and cloned audio to pass remote interviews, then send a different person to onboarding. The article describes this as a real and growing hiring-fraud problem, especially for high-access technology and defense roles,…
Spanish police arrested a suspect accused of using real-time face-swap deepfakes during live video identity checks to obtain fraudulent digital certificates for later misuse. The article describes how the attacker relied on lighting tricks and camera injection to spoof document and biometric…
A Hong Kong employee at engineering firm Arup transferred about $25.6 million after joining a video conference where every other participant was a deepfake. The incident shows how convincing fake video identities can be used to pressure employees into approving high-value payments, and why…
North Korean-linked actors are using fake identities to get hired into remote IT roles, then leveraging that trusted access to steal data or attempt to deploy malware. The article describes real cases (including KnowBe4 and Netskope) and explains how the scheme scales using fabricated personas,…
The article describes how real-world phishing and social engineering are evolving to bypass the checks employees are trained to use (bad grammar, suspicious URLs, obvious fake login pages). It highlights specific, observed attack workflows including QR-code “device hop” phishing, OAuth token theft…
