This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
High-level U.S. government officials, including White House Chief of Staff Susie Wiles and Secretary of State Marco [name withheld], were targeted by sophisticated impersonation campaigns. Attackers used AI-generated voice and text messages to pose as these officials, aiming to gain access to sensitive information and accounts. The FBI has linked these incidents to broader malicious campaigns targeting government officials and their contacts, highlighting significant vulnerabilities in national security communications.
President Trump announced that White House Chief of Staff Susie Wiles had been impersonated via a phone breach involving AI-generated voice messages and spoofed texts. The attacker reportedly contacted high-profile individuals in her network while posing as Wiles. The incident is linked to a campaign identified by the FBI in April 2025, involving malicious actors using social engineering and AI to impersonate senior U.S. officials and gain access to sensitive information. See Incident 1077.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The attackers compromised the privacy of senior officials by accessing and exploiting their private contact lists to facilitate the targeted impersonation.
The attackers used AI voice cloning to impersonate trusted high-level officials in targeted social engineering attempts to gain unauthorized access or solicit funds.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by malicious human actors intentionally deploying AI voice-cloning tools to execute targeted impersonation and social engineering campaigns.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
Russian SVR-affiliated cyber actors utilized sophisticated AI voice cloning to impersonate high-level U.S. officials, including the Secretary of State and White House Chief of Staff, in a targeted espionage campaign. By contacting foreign ministers and members of Congress, the operation directly threatened the integrity of sovereign diplomatic communications and national security protocols, representing a severe information warfare and government function compromise.
The AI was used as a tool to generate synthetic voice clones and text messages based on inputs provided by the human attackers. The reports describe the technology as 'AI-generated voice' and 'cloned voice' used to facilitate impersonation, indicating it functioned as a deterministic generation tool.
Limited Risk: The technology used involves AI-generated content such as deepfakes (voice cloning), which falls under Risk Level 3 due to transparency and disclosure obligations.
The AI system's primary function in this incident was to clone and generate synthetic voices of specific individuals to deceive targets.
The reports provide clear, consistent details about the impersonation of Susie Wiles and Marco [name withheld] using AI voice cloning. The involvement of the FBI and official statements from government sources ground the facts well, leaving little ambiguity about the nature of the AI's role as a tool for impersonation.
None. The reports consistently describe these events as targeted cyber-espionage and social engineering campaigns leveraging synthetic media.
Technology
AI Voice Cloning Technology
Enabled highly convincing synthetic audio generation of senior officials.
Exploitation of Auto-Synced Contacts
Allowed attackers to map and target trusted networks of high-profile users.
Data Inputs
Compromised Contact Directories
Leaked private numbers provided the essential inputs for targeting campaigns.
Human Factors
Overreliance on Voice Verification
Targets trusted the voice identity without performing out-of-band validation.
Process and Methods
Inadequate Identity Verification
Lack of standard protocols to verify the source of urgent communications.
Management
Dismissive Incident Response
Minimizing security breaches delayed the implementation of systemic fixes.
Reduced Cybersecurity Funding
Staff cuts at CISA weakened national capabilities to detect deepfake threats.
Regulatory Environment
Insufficient IT Access Controls
Broad access permissions to federal databases increased the attack surface.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
