What is a deepfake?
A deepfake is audio, video or an image generated or altered by AI to impersonate a real person convincingly. In social engineering, deepfake voices and faces make a fraudulent call or meeting appear to come from an executive, a colleague or a supplier.
How it works
A few seconds of public audio can be enough to clone a voice. Attackers use cloned voices in vishing calls and voicemails, and synthetic video in meetings, to approve payments or reset access.
Verification by a second, known channel, such as calling back on a number from the directory, defeats most deepfake fraud regardless of how real it sounds.
Why it matters
Deepfakes remove the instinct that “I recognize their voice” is proof. Teams need verification habits that do not depend on recognizing anyone.
How Living Security helps
Living Security calendar phishing sends an invite to a Microsoft Teams meeting link that opens a voice deepfake simulation the customer designs, then coaches.