A new study shows that as artificial intelligence rapidly advances, criminals are continuously enhancing their fraudulent techniques using AI, leading to a sharp rise in digital scams.
Consumer Reports, Aspen Digital, and the Global Cyber Alliance released a report revealing that 90% of Americans have been affected by cyber attacks and scams, with 17% of consumers reporting financial losses due to digital security vulnerabilities.
Experts interviewed by CBS News stated that AI has lowered the threshold for committing fraud, making scams that were once costly or required significant time and effort much easier to execute. Additionally, AI has led to an increase in data breaches, as fraudsters utilize AI technology to quickly integrate and analyze various information in order to design highly targeted scam traps.
The cutting-edge Artificial Intelligence Lab warns that AI may have destructive capabilities, including posing a threat to humanity as a whole. While some experts believe that this scenario may not happen in the short term, or possibly never, they caution that AI has already altered the nature of digital fraud, posing unprecedented risks to consumers’ finances.
Stacey Higginbotham, a cybersecurity researcher at Consumer Reports, highlighted that in the past, there were stereotypes about who might be vulnerable to scams, but now, anyone can be a target. She emphasized that AI will only accelerate this trend, predicting that both the quantity and quality of fraud are set to significantly increase.
A survey by Consumer Reports found that 90% of Americans have experienced digital fraud or cyber attacks, with consumers increasingly concerned about the security of their personal data and the theft of their banking account information by malicious actors. Phil Radford, President and CEO of Consumer Reports, noted that AI has made fraud faster, cheaper, and more targeted, indicating that no one is immune. Companies must be held accountable, and governments need to establish genuinely effective protection measures.
Cyber attacks are becoming more widespread, causing even tech-savvy individuals to worry. Technology experts stress the importance of strengthening cybersecurity measures to safeguard personal information from being compromised. While some people remain vigilant against phishing emails, being able to identify common spelling errors and suspicious links, they may still struggle to defend against AI-powered scams.
Higginbotham explained that while conventional fraud typically involves receiving messages from strangers, a large number of AI fraudsters leverage deepfake technology to make fraudulent messages more convincing, leaving individuals vulnerable.
She provided an example where fraudsters, armed with personal information obtained through security loopholes, can impersonate financial institutions to offer enticing deals such as low-interest rate mortgages. With the use of AI, fraudsters are more adept at utilizing personal data and reducing the cost of fraud.
Higginbotham pointed out that currently, every fifth fraud case contains some form of targeted content, a ratio expected to rapidly increase. With more data leaks, the proliferation of personal information allows AI to easily generate personalized scam messages in large quantities.
The enhancement of fraudulent techniques by criminals is attributed to the increasing specificity of fraudulent information. Colin Ferris, an expert from cybersecurity company Silverfort, stated that before the advent of AI, the workload for personalized customizations was massive; tailoring 50 phishing emails individually was not feasible due to the significant effort involved.
Experts suggest that some security measures previously deemed unnecessary have now become essential, such as various forms of multi-factor authentication.
Brian Cute, President and CEO of the Global Cyber Alliance, emphasized that while individual security measures are necessary, they are insufficient on their own to prevent the improper exploitation from upstream sources, like insecure network routes and maliciously registered domains.
Cute believes that addressing these vulnerabilities requires collaboration among businesses, governments, and charitable organizations. Building a more secure internet necessitates such cooperation as crucially as setting passwords or implementing security patches.
Experts recommend the simplest non-technical approach, advising individuals to pause for a few seconds before clicking, downloading, or sharing links. An initiative known as “Take9” has been launched as a global public awareness campaign for network security, encouraging people to count to nine before responding to suspicious texts or emails to avoid hasty clicks or divulging personal information.