Identity, Generative AI

Deepfakes unveiled: Emerging threats and technological defenses in the digital age

Deepfake technologies have transformed the cybersecurity landscape, presenting unprecedented challenges for organizations worldwide.

In a recent expert discussion, Ping Identity's Maya Ogranovitch Scott and Darrell Geusz unpacked the alarming growth and implications of deepfake fraud. The technology's accessibility is perhaps most concerning. Open-source tools and affordable SaaS services now enable almost anyone to create convincing audio and video impersonations.

What was once a complex technological feat is now achievable in minutes, with some voice cloning taking as little as 15 minutes to produce remarkably realistic results.

Real-world deepfake attacks

Several recent incidents highlight the technology's potential for harm:

  • A Hong Kong employee was tricked into transferring $25 million after a conference call with deepfake recreations of company executives
  • North Korean state-sponsored actors are using stolen identities to infiltrate IT positions in target countries
  • Sophisticated romance scams and investment fraud schemes leverage deepfake technologies to manipulate victims

Global growth and proliferation

Deepfake incidents have seen explosive growth globally. In 2024, countries like China, Spain, Germany, and the United States experienced significant increases:

  • 303% growth in the United States
  • 500% in Mexico
  • 3,000% in Bulgaria
  • 2,800% in China

Critically, this growth isn't limited to election-related activities but spans multiple sectors and motivations.

Attack vectors and methodologies

Threat actors employ two primary deepfake infiltration methods:

  1. Man-in-the-middle cloud attacks, where perpetrators inject themselves into live interactions
  2. Direct point-to-point interactions where fraudsters control the entire communication channel

Emerging technologies now allow creating realistic videos from single still images, adding another layer of sophistication to potential attacks.

Targeted Sectors

Deepfake threats are particularly prevalent in:

  • Workforce onboarding
  • Financial services
  • Loan origination
  • Wealth management
  • Call center interactions
  • B2B partner ecosystems

Technological Countermeasures

Ping's Neo solution offers comprehensive defense strategies:

  • Government ID authentication
  • Selfie matching and liveness detection
  • Audio channel spoofing prevention
  • Verifiable digital credentials
  • Out-of-band identity verification

The future of identity protection

As deepfake technologies continue advancing, organizations must adopt multi-layered verification approaches. The goal is creating a robust, cryptographically secured ecosystem that frustrates fraudsters and protects digital identities.

By implementing advanced credential technologies and maintaining vigilant verification processes, businesses can significantly mitigate the risks posed by increasingly sophisticated deepfake threats.

Bill Brenner

InfoSec content strategist, researcher, director, tech writer, blogger and community builder. Senior Vice President of Audience Content Strategy at CyberRisk Alliance.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds