Cybercriminal caught after face-changing software glitch exposes identity

Spain's national police have arrested a cybercriminal who allegedly made 38 attempts to impersonate 30 individuals to obtain digital certificates. The suspect is accused of using sophisticated techniques, including deepfake technology and forged documents, to bypass identity verification processes. The investigation was complicated by the suspect's use of numerous devices and stolen identities, with further coverage provided by The Register.

The unnamed man targeted a security company authorized to issue digital certificates, a process crucial for online authentication and legally recognized electronic signatures in Spain and other EU countries. He allegedly employed deepfake tools, altered photographs, and a custom lighting rig to simulate security features on forged documents during live video verification. The suspect also used VPNs to anonymize his connections. His alleged scheme unraveled when his face-changing software experienced a brief glitch, momentarily revealing his true face to the verification camera.

Upon arrest, investigators seized an encrypted laptop, mobile phones, and storage devices. The complexity of the case was amplified by the suspect's use of over 320 phone lines across 24 devices, many registered under stolen identities.

Source: The Register