There\u2019s a longstanding piece of advice that says: \u201cYou can\u2019t believe anything you hear, and only half of what you see.\u201d There\u2019s always been an element of truth to that, even in the days before modern high-powered computing. Now, with the rise of digital media, it has become startlingly \u2014 and worryingly \u2014 easy to falsify audio and video. <\/p>\n\n\n\n
\u201cDeepfake\u201d is the popular term for a realistic re-creation of someone\u2019s face or voice, usually (so far) a celebrity or politician. They\u2019ve mostly been created as viral videos or proofs of concept, but it\u2019s unlikely to stop there. Security professionals fear that criminals will take the same technology currently used to create a celebrity deepfake and turn it against ordinary people for identity theft purposes. <\/p>\n\n\n\n
Even if you spend little time on social media, or the sketchy websites where fake videos have begun to proliferate, you\u2019ve probably seen deepfakes that were created by some of the world\u2019s leading digital-imaging specialists. One early example was this 2014 chocolate ad<\/a>, which used live models and digital trickery<\/a> to recreate the late Audrey Hepburn in all her youthful 1950s beauty. <\/p>\n\n\n\n More recently the Star Wars movie \u201cRogue One\u201d used similar technology to bring back the late Peter Cushing, and to de-age the late Carrie Fisher, as it\u2019s set before the original 1977 film. Director Martin Scorcese also used digital de-aging in his film \u201cThe Irishman,\u201d allowing established stars such as Robert De Niro and Joe Pesci to play both younger and older versions of their characters. <\/p>\n\n\n\n Fans didn\u2019t necessarily like<\/em> the end result, due to the \u201cuncanny valley\u201d effect, which was just noticeable enough to be jarring in the context of a big-screen film in high resolution. One tech-savvy fan was miffed enough to take things into his own hands and went viral<\/a> when he proved that he could de-age De Niro better than Scorcese had. It\u2019s a bravura piece of fan art, but it also demonstrates exactly why deepfakes are keeping security professionals awake at night. <\/p>\n\n\n\n It\u2019s commonplace to point out that today\u2019s smartwatch or fitness tracker contains a more powerful computer than the ones NASA used a generation ago to put astronauts on the moon. The processing power available to ordinary people with run-of-the-mill computers would have been unimaginable not so long ago, and software has kept pace. That\u2019s why deepfakes could become more prevalent than you might think. <\/p>\n\n\n\n Deepfakes begin with a form of artificial intelligence (AI) called \u201cmachine learning.\u201d Programmers train their algorithms<\/a> to recognize realistic patterns of movement (like facial expressions) by watching hundreds of hours of video. With time and repetition the software evolves rules to re-create those patterns and applies them to images of a specific real person. <\/p>\n\n\n\n It\u2019s a process that requires an investment of time and money, and it\u2019s faster on high-powered equipment, but \u2014 this is important \u2014 once that software model is created, it can be used on ordinary, less-powerful computers. Off-the-shelf software can do this and there\u2019s a niche within the criminal underworld that creates these models for resale to enterprising but less sophisticated scammers. <\/p>\n\n\n\n What does that mean for you? In practical terms, it means that if there are photos of you available anywhere online \u2014 your social media accounts, your company\u2019s website, the cloud backups of all your friends\u2019 and family\u2019s photos \u2014 they can be scraped or hacked and used to create images or video that are every bit as believable as the celebrity deepfakes created by TV satirists and YouTube hobbyists. <\/p>\n\n\n\n One sadly predictable outcome is that pornographic deepfakes have become a hazard of online life<\/a> for many women. Women in public life, like high-profile politician Alexandria Ocasio-Cortez<\/a>, are especially popular targets, but it can happen to anyone, often in the form of \u201crevenge porn\u201d created by bitter exes. <\/p>\n\n\n\n There are less obvious ways that this technology can be used to disrupt your life. Suppose you\u2019re locked in a custody battle, and a deepfake falsely portrays you engaging in illegal activity or in verbal abuse of your kids? Similarly, an unscrupulous business rival might concoct a video that damages your reputation, or a co-worker might use one to undercut you in the race for a big promotion. The possibilities are endless. <\/p>\n\n\n\n While politicians and celebrities tend to be the targets of having their images and voices impersonated (yes, audio deepfakes are a thing<\/a> as well), deepfakes hold tremendous potential for conventional identity theft and fraud as well. <\/p>\n\n\n\n The prospect has law enforcement and security specialists spooked. In 2020, for example, the Carnegie Endowment for International Peace released a research paper<\/a> detailing 10 ways deepfakes could be used to target everyone from individuals to entire financial markets. Believably faked voices or face-swapped videos can be used to impersonate C-suite executives or key employees, for example, in order to \u201capprove\u201d fraudulent payments and transfers or gain access to privileged information. <\/p>\n\n\n\n The same technologies could be used to manipulate stocks, cause a run on a bank or even potentially crash the economy temporarily by causing a panic sell-off in the major markets. For most of us that sort of thing is \u201cabove our pay grade,\u201d but the technology is rapidly becoming cheap enough to be used against anyone. <\/p>\n\n\n\n Suppose a friend or family member reached out to you in a video call and asked for an emergency loan. You\u2019d probably help out if you could, wouldn\u2019t you? Similarly, if you were in a Zoom meeting with your boss and she said you needed to click a link in the message she was sending you, you probably would, right? <\/p>\n\n\n\n The phone numbers, emails and social media accounts we use to initiate that kind of contact can be hacked, and scammers already have ways to spoof an email address<\/a> or phone number<\/a> if they can\u2019t get access to the real thing. A deepfaked \u201cyou\u201d could be used similarly to defraud your friends and family or the company you work for. <\/p>\n\n\n\n The video doesn\u2019t need to be production quality or even especially good. We\u2019re not viewing it on a movie screen, after all, but on our devices in videoconferencing or video chat apps. The telltale signs that make faked videos easy to spot in high-res \u2014 lack of detail, video that\u2019s out of sync with the audio, blocky pixelation \u2014 are all things we\u2019ve learned to expect in chat.<\/p>\n\n\n\n Your voice or image could also be used to bring an existing threat, synthetic identity theft<\/a>, to a new level. With deepfakes, that fake persona can now look or sound like anyone on calls and video chat. <\/p>\n\n\n\n It\u2019s a whole new frontier. Many common social media scams<\/a> and romance scams<\/a> start with a falsified account (a \u201csock puppet\u201d). Deepfake software makes them more convincing, giving scammers the ability to add videos to their social media timeline or (in the not too distant future) the ability to video chat with their targets in real time, with a believable voice and face that can\u2019t easily be traced. <\/p>\n\n\n\n Another alarming aspect to all of this is that many companies, especially financial institutions, have begun turning to sophisticated biometric authentication<\/a> (facial recognition, voice recognition) to fight existing forms of fraud and identity theft. If scammers can create a realistic synthetic identity, they can use it to open fraudulent accounts. If they can realistically impersonate you, they can beat a facial-recognition or voice-recognition algorithm to take over your<\/em> account. <\/p>\n\n\n\n Meeting the threat of deepfakes is a major challenge, and most of it is out of your hands. A lot of the heavy work will need to be done by security professionals, financial institutions and government agencies (especially law enforcement). Ironically, the most powerful tool these authorities can wield against deepfaking criminals is artificial intelligence, the same tool used to create them. Fakes can fool the human eye or ear relatively easily, but AI is much harder to beat.<\/p>\n\n\n\n That doesn\u2019t mean you have to make it easy for scammers. You could start by auditing your social media<\/a> accounts periodically, to make sure your friends and followers are all people you know (or at a minimum, actual people). Set photo posts and video posts to \u201cprivate\u201d or \u201cfriends only,\u201d<\/a> wherever possible, to make it harder for scammers to gather up the raw materials for their fakery. <\/p>\n\n\n\n Deepfakes are most dangerous when they\u2019re combined with existing forms of identity theft, and \u2014 because that\u2019s an established and well-known threat \u2014 there\u2019s a lot<\/em> you can do about that. Some standard precautions include: <\/p>\n\n\n\n …or to wrap up all of that in one simple sentence, knowing how to check for identity theft<\/a> and doing it regularly. <\/p>\n\n\n\n You can think of deepfakes (and identity theft in general) as being like forest fires: Preventing them entirely is hard, but taking away the fuel they rely on can minimize the risk. <\/p>\n\n\n\n There\u2019s a longstanding piece of advice that says: \u201cYou can\u2019t believe anything you hear, and only half of what you see.\u201d There\u2019s always been an element of truth to that,…<\/p>\n","protected":false},"author":112,"featured_media":26573,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[614],"tags":[],"class_list":["post-26572","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-safety"],"yoast_head":"\nDeepfakes as a Service<\/h2>\n\n\n\n
Where Is Deepfake Technology Headed?<\/h2>\n\n\n\n
Deepfakes and Identity Theft<\/h2>\n\n\n\n
Deepfakes and You<\/h2>\n\n\n\n
Deepfakes and Next-Level Identity Theft<\/h2>\n\n\n\n
What You Can Do About Deepfakes<\/h2>\n\n\n\n
\n
References:<\/h3>\n\n\n\n
\n