Deepfaked Voice Enabled $35M Bank Heist in 2020

The pleasure of Shawn’s company

Is what I most enjoy.

He put a tack on Ms. Yancey’s chair

When she called him a horrible boy.

At the end of the month he was flinging two kittens

Across the width of the room.

I count on his schemes to show me a way now

Of getting away from my gloom.

[context: in Mission Impossible 3, Tom Cruise coerces Philip Seymour Hoffman into reading a poem containing all English phonemes to train the model to clone his voice. We are literally living in Mission Impossible now]

https://www.google.com/amp/s/literalminded.wordpress.com/200...

Original clip: https://youtu.be/CgX4uJSj00Y

So: emails were trusted, phone calls A to B were trusted, secure identification systems were not in place, A was never seen in person, and not even a call from B to A was performed just to be sure.

So, all because people with responsibilities are uninformed about the year they live in. And because cognitively they are unable to care.

By the way, this is has already been a way to circumvent KYC on crypto exchanges, as many use technology that analyzes a video of you with your ID.

The crypto exchanges are a much more benign use of deepfakes as they implement KYC primarily to deny users of certain countries out, and the user just wants to use their own funds to trade on the exchange. The crypto exchange is just covering its own ass here, and not getting things stolen from it.

Of course, any body with stolen funds that they want to trade or launder can also create fake accounts at these crypto exchanges using deep fake KYC.

But yeah, back to the article, traditional banks and exchanges have much lower tech verification technology. So its probably a better use of time to just heist them for larger sums via wire transfer, instead of trying to grow/launder a crypto balance.

How much audio sample data would you need from the subject you're impersonating to do this? How did the fraudsters know what the manager's voice sounded like?