How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Teams are urged to drill out-of-band checks against cloned-voice payment, help-desk, and admin-access fraud.
The Hacker News describes a readiness drill for cloned-voice and synthetic-video fraud used in payment requests, help-desk MFA resets, and privileged-access changes. A 2025 Gartner survey of 302 cybersecurity leaders found 62% had experienced a deepfake attack in the prior year, including 43% via audio calls and 37% on video calls. The FBI has warned that AI voices impersonating senior US officials can sound nearly identical, while a January 2026 Osterman study of 128 US leaders, commissioned by IRONSCALES, found 60% lacked confidence in countering deepfakes. Recommended process controls include directory callbacks, dual approval, rotating challenge phrases, and explicit permission to pause urgent requests.
- Gartner: 62% of 302 leaders saw a deepfake attack in a year.
- Audio and video incidents were reported by 43% and 37%.
- Cloned voices target wires, MFA resets, and new admin accounts.
- FBI advises confirming requests through an independently sourced number.
- Drills should enforce callbacks, dual approval, and no-blame reporting.
- Vendors
- IRONSCALES
- Organizations
- GartnerFBIOsterman ResearchIRONSCALES
- Countries
- United States
From the original article
9 min read at thehackernews.com
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.