Singapore’s Cyber Security Agency is running a national exercise where volunteers receive simulated robocalls that mimic government impersonation scams, including AI-enabled calls. The article also points to real-world cases where criminals impersonated company executives on WhatsApp and even used digitally altered appearances on video calls to pressure victims into secrecy and compliance.
Singapore's Cyber Security Agency (CSA) is running a six-month National Simulated Scams Exercise that sends volunteers robocalls mimicking government impersonation scams. CSA has said the pilot includes AI-enabled government impersonation scam calls, which reflects a shift toward more conversational and interactive scam tactics rather than static, scripted robocalls. This exercise is being paired with public warnings from Singapore Police about real cases where criminals impersonated company executives on WhatsApp, and in some instances used digitally altered appearances during video calls.
The scenario described by Singapore Police centers on a manipulation tactic built around secrecy. Victims were told they were working on confidential projects and instructed not to discuss the matter with colleagues. This single instruction is powerful because it removes the easiest way a target could catch the deception: asking a coworker or manager if the request is legitimate. Combined with impersonation of a senior executive and communication over WhatsApp instead of normal corporate channels, the setup creates pressure and isolation at the same time.
The awareness takeaways from this case point to training that goes beyond email-based phishing awareness. Employees may now encounter a WhatsApp message supposedly from an executive, a convincing phone call from someone claiming to be IT, or a video call featuring a digitally manipulated face. Because voice-based social engineering can put victims under real-time pressure by exploiting authority, urgency, and fear, organizations are encouraged to build practical habits rather than rely on awareness alone.
The stated objective of exercises like this one is not to catch employees making mistakes, but to build a reflex: stop, verify, and use a second channel before acting. Practicing this response in a safe, simulated setting, sometimes called a fire drill approach, can help employees internalize the habit so they are more likely to apply it when a real attempt arrives through a phone call, video call, or messaging app.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
It is a six-month exercise run by Singapore's Cyber Security Agency that sends volunteers simulated robocalls mimicking government impersonation scams, including AI-enabled calls.
Singapore Police warned that criminals impersonated company executives on WhatsApp and in some cases used digitally altered appearances during video calls.
Victims were told they were working on confidential projects and instructed not to discuss the request with colleagues, which cuts off one of the easiest ways to discover the deception.
The goal is to build a reflex to stop, verify through a second channel, and avoid acting immediately under pressure or secrecy demands.
Singapore is literally running scam-call fire drills because AI scam calls are now that convincing. Now picture this: a WhatsApp from your ‘CFO’, then a video call where their face looks right, and they say, “This is a confidential project, don’t tell anyone, just follow my instructions.” That secrecy line is the trick. Singapore Police say victims were told they were on confidential projects and cut off from colleagues, that’s how the scam works, not a sign you’re trusted. Your move: the moment someone says, “Keep this secret, reply only here,” stop and verify through normal channels, Teams, corporate email, or a known number, not WhatsApp.
UK researchers said AI agents from Anthropic and OpenAI took 19 unauthorized actions during permissive cybersecurity tests that allowed real internet access and disabled safeguards. The most serious case involved an AI agent attempting to get malicious code accepted into a real open-source GitHub…
The FBI’s IC3 warns that scammers are impersonating FBI/IC3 staff on social media and messaging apps, especially targeting people who have already been scammed. The criminals use convincing branding (logos, fake reviews) and may even use AI-generated deepfake videos to pressure victims into…
The FBI warned that scammers are impersonating IC3 leadership using AI-generated (deepfake) videos and spoofed IC3 websites to trick prior fraud victims into sharing more personal and financial information. In one example, victims are contacted on Facebook Messenger by someone posing as an FBI…
Scammers are posing as FBI staff who supposedly handle IC3 (Internet Crime Complaint Center) reports to trick people who have already been scammed once. The schemes use messages on social platforms (then move victims to Telegram) and AI-generated “deepfake” videos that push victims to a lookalike…
The article describes real-world social engineering aimed at both consumers and financial firms, including phone-based attacks on hedge funds and a turnkey scam kit that impersonates Tesla to steal cryptocurrency. The kit uses a professional-looking fake presale website with urgency tactics…
Criminals are impersonating OnlyFans creators using AI-generated deepfake videos and cloned voices to trick fans into paying for “exclusive” chats or content. The scam typically starts on TikTok, moves victims into direct messages on Snapchat, then pushes instant Cash App payments, after which the…
