*How do I hack executives in 2025 & how can you protect yourself and team!?* Thanks Picnic for partnering w/ me to demo how contact details on data brokerage sites can lead to a deepfake impersonation attack in a live video call (with the brilliant Robert M. Lee as... my target)!show more

For this demo w/ @RobertMLee for @getpicnic, I used a brand new deepfake tool! Previous deepfake tools of this caliber require you to upload the target reading out a code to deepfake them...this new tool sadly did not require any checks before letting me deepfake/clone Rob!

Asking for a password is just one example of what attackers are doing when they pretend to be executives (with deepfakes) to the exec's team. Attackers are also asking for wire transfers (millions in many cases), and sensitive docs.

These types of exec attacks are so interesting for attackers because they have been getting caught up in email filters so they turn to phone calls & texts to attack. Attackers can easily find contact details on data brokerage sites to contact exec's teammates pretending to be the exec to the target (which is why it's essential those contact details are removed online for execs and their teams, hence why I partnered with @getpicnic on this live demo video).

But don't just take my word for it, read about how attackers are targeting executives and their teams specifically in the latest deepfake style attacks to the tune of $25 million, $35 million, etc... - CNN: British engineering giant Arup revealed as $25 million deepfake scam victim - TechCrunch: Wiz CEO says company was targeted with deepfake attack that used his voice - Fortune: Ferrari exec foils deepfake attempt by asking the scammer a question only CEO Benedetto Vigna could answer - Forbes: Fraudsters Cloned Company Director's Voice In $35 Million Heist

What’s the cost of mistakes in your contracts? If you work with contracts day-to-day, it’s time to automate. Track every detail, streamline workflows ... ✨ Make managing contracts as easy as a few clicks. Visit our new website & book your demo today!

@getpicnic @RobertMLee This is freakishly real. I can see 90% of execs falling for this.

@getpicnic @RobertMLee It's scary because we are already seeing this in the wild (small numbers right now but sadly have 4 public news stories about it in the past couple quarters alone).

@getpicnic @RobertMLee I enjoyed watching this 🔥🫡

@getpicnic @RobertMLee Great demo. And a hard problem to solve with execs. I'm doing my best to get mine to use global SSO and processes that can't be short cutted via request from executives to stop a lot of fraud.

@getpicnic @RobertMLee That was a great video. Thanks!

@getpicnic @RobertMLee Honestly, as evil as this sounds, I would first look at their kids