Three men arrested over AI executive and lawyer impersonation fraud
Prosecutors say the scheme took more than $129 million from companies worldwide between 2024 and 2026.
Stories per day · 30 days
3 RSS
Relatedphishing4deepfake3adware2certificate2chrome2fraud2google-play2hizbartech2law-enforcement2microsoft-teams2scam2social-engineering2account-takeover1ai-bots1ai-security1android1apache-storm1app-fraud1
52 stories, newest first · one card per story
Stories tagged #impersonation
Apache Storm DRPC doAsUser skips impersonation checks (CVE-2026-124496)
An authenticated Storm client can run DRPC functions limited to another user; 3.2.0 fixes storm-server.
Two-way physical-layer authentication bounds multi-antenna impersonation
Derived missed-detection bounds cover challenge replacement, response replacement, and both under TDD reciprocity.
Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million
The indictment details how three men used deepfakes to impersonate CEOs and lawyers to wire $129 million in fraud.
OpenVox updates fix RCE and client impersonation vulnerabilities
Updates to openvox-agent, server and database versions 9.2.0+, 8.18.0+, 8.32.0+ mitigate RCE and impersonation issues.
Apache Syncope AuthProfile value escalation via self-service update (CVE-2026-110535)
Non-admin users can configure impersonation for WA surrogate authentication through self-updates.
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
The campaign ran from late September to late October, impersonating 32 AI bot identities to scan for exposed secrets across multiple industries.
1
LXD and MicroCloud Flaw Lets Attackers Impersonate Trusted Clients (CVE-2026-112816)
CVSS 10.0 flaw in mutual TLS certificate validation lets attackers impersonate trusted clients without private key; fixed in LXD 6.10.1 and MicroCloud 3.4.1.
1
Fake Padre Terminal App Store app linked to $23,000 Solana theft
Researcher Iris says 27 wallets were drained after October 25, and theft continued after Apple removed the app.
1
ENGIE says partner sales tool exposed French customer contract data
Exposed records include names, phones, emails, customer IDs and energy supply identifiers; banking data was not included.
1
TransUnion puts US lenders' synthetic identity fraud exposure at $2.4 billion
The June 2026 estimate is potential exposure, not confirmed losses, with auto lending accounting for $1.5 billion.
2
Microsoft Teams will use AI to detect phishing in external chats
Targeted Release runs through mid-November and worldwide availability is set for mid-December, with no admin setup required.
1
Microsoft Teams to get AI-powered, context-aware phishing detection
Admins need not enable it, and Microsoft says message content is not kept for model training.
1
OpenVPN certificate subject handling flaw may allow impersonation
Ubuntu says a remote authenticated user could possibly impersonate other users; no CVE or versions are given.
EU opens DSA probe into Booking.com over scam and phishing risks
Formal proceedings could lead to a fine of up to 6% of Booking.com's global annual turnover if the firm is found non-compliant.
1
State Bank of India confirms 3,897 customer records on dark web
The October 21 filing says authenticity and the source remain unknown, and listed fields omit account numbers, passwords and Aadhaar.
Scam ads on social platforms phish users, push malware and steal money
The FTC is only starting to consider rules that would make platforms stop impersonation-scam ads before users see them.
2
Florida police say scammers cloned a sheriff’s voice
Osceola County officials told local news a resident received a voicemail using Sheriff Steve Moser’s cloned voice and picture.
Romance scam doc, Super Scam Me, takes viewers deep into love-bombing terrain
National Geographic’s Super Scam Me documents romance scams the FTC says cost Americans about $1.5 billion yearly.
2
Google Play Hosted Fake Chrome App With 100,000+ Downloads
Google Play hosted a Hizbartech fake Chrome app, later removed, that showed 100,000-plus downloads.
6
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
A Hizbartech app impersonated Chrome on Google Play and showed a disputed 100,000-download badge before apparent removal.
5
From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)
Rapid7 details dozens of Zimbra flaws, including mailbox impersonation and cross-user access, with some fixes still missing.
Attackers hijack country-code domains to impersonate Google and other services
Attackers hijacked .gh, .sl, and .as DNS to get certificates impersonating Google and others.
4
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft Teams will integrate third-party deepfake detection and impersonation warnings for meetings, reaching general availability in November.