Technology

59092 readers

6622 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

202

Deepfake scammer walks off with $25 million in first-of-its-kind AI heist (arstechnica.com)

submitted 9 months ago by L4s@lemmy.world to c/technology@lemmy.world

22 comments fedilink hide all child comments

Deepfake scammer walks off with $25 million in first-of-its-kind AI heist::Hong Kong firm tricked by simulation of multiple real people in video chat, including voices.

you are viewing a single comment's thread
view the rest of the comments

[–] theskyisfalling@lemmy.dbzer0.com 36 points 9 months ago (4 children)

What kind of company let's a single employee transfer that amount of money without multiple different password entries or checks from different people though, seriously?

Doesn't matter if they had a conference call with what appeared to be certain people as the article says they could easily have used key pair verification such as pgp. Sounds like poor security all around especially considering the amounts involved.

[–] WhatAmLemmy@lemmy.world 11 points 9 months ago* (last edited 9 months ago) (3 children)

PGP? Have you ever dealt with any banking or financial corporations? You'd have better luck getting the money handlers and decision makers to authenticate transactions with magic.

Hong Kong and Japan are the absolute worst I've experienced. Their online banking UI's and processes are stuck in the late 90's to early 2000's.

[–] gravitas_deficiency@sh.itjust.works 6 points 9 months ago

Japan:

your second authentication factor will be stored on this 3.5” floppy drive

[–] EssentialCoffee@midwest.social 2 points 9 months ago

Has South Korea moved on from Internet Explorer for their banking yet?

[–] itsnotits@lemmy.world -2 points 9 months ago (1 children)

online lbanking UIs*
the late '90s*
early 2000s*

[–] Silentiea@lemm.ee 2 points 9 months ago

It's stylistically acceptable to put an apostrophe for plurals in cases where the plural thing isn't a "normal" word, as is the case for initialisms like UI or numbers like the latter two you caught.

Obviously a given body may make its own rules in this regard, but luckily English has no overall authority, and this is informal communication outside the domain of any minor ones (beyond, perhaps, idle pedants and prescriptivists).

[–] meat_popsicle@sh.itjust.works 5 points 9 months ago

lol Finance is sometimes hilariously low tech. Lookup how ACH works, it’s a fucking farce.

[–] itsnotits@lemmy.world 3 points 9 months ago (2 children)

lets* a single employee

[–] theskyisfalling@lemmy.dbzer0.com 5 points 9 months ago

Good catch, autocorrect is a bastard :p

[–] Silentiea@lemm.ee -1 points 9 months ago

It's yes tits, I think.

[–] Lmaydev@programming.dev 2 points 9 months ago* (last edited 9 months ago)

Somewhere I worked the CEOs email got hacked and they asked the head of finance to change the bank account details for a 100k payment that was due to go out.

Luckily they thought to double check with them. But it came really close to happening.

This all happened via a phishing email.

Social engineering is how most hacks happen. Doesn't matter what protection you put in place. People are always the weakest link.