This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Cryptocurrency analyst Mai Fujimoto was the victim of a sophisticated social engineering attack where hackers used AI-generated deepfake technology to impersonate a trusted contact during a Zoom call. By feigning technical issues, the attackers convinced Fujimoto to install software that contained malware, leading to the compromise of her X, Telegram, and MetaMask accounts. The incident prompted warnings from industry figures about the unreliability of video call verification in the age of advanced deepfakes.
Cryptocurrency analyst Mai Fujimoto reported losing access to her X, Telegram, and MetaMask accounts through a video call with a purported deepfake impersonating a trusted contact. According to Fujimoto, the attacker, who appeared on Zoom as her acquaintance, instructed her to install software under the guise of resolving an audio issue. Fujimoto believes this enabled malware installation. In response, Binance founder Changpeng Zhao warned such attacks render video call verification unreliable.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The victim relied on the visual representation of her acquaintance during the video call despite persistent audio issues, leading to unsafe software installation.
The incident involved hackers using AI deepfake technology to impersonate a trusted contact in a targeted video call to deceive the victim into installing malware, leading to account compromises.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human hackers who intentionally deployed and used AI deepfake technology to execute a social engineering attack.
A private cryptocurrency analyst fell victim to a social engineering attack utilizing real-time deepfake video technology during a Zoom call, leading to compromised personal accounts. While the incident is a localized cybercrime with minor national security impact, it highlights the rising threat of real-time synthetic media in bypassing traditional video verification methods.
The AI deepfake technology was used as a tool by malicious actors to generate a synthetic video stream of an acquaintance to facilitate a social engineering attack.
Risk Level 3: Limited Risk. The report describes the use of AI-generated content, specifically deepfakes, which falls under the category of systems posing moderate risk with transparency obligations.
The AI system was used to generate a real-time deepfake video of the victim's acquaintance to impersonate them during a Zoom call.
The report clearly describes the social engineering attack, the use of deepfake technology during a Zoom call, and the resulting compromise of the victim's accounts. There is little ambiguity about the sequence of events or the role of the AI tool.
None
Technology
Advanced AI Deepfake Synthesis
Real-time video synthesis allowed highly convincing impersonation of a friend.
Malicious Link Execution
Installation of malware via a link shared during the video call.
Data Inputs
Compromised Friend Account Data
Attackers used a compromised Telegram account to initiate trusted contact.
Acquaintance Likeness Data
Attacker used the victim's friend's biometric and visual data for deepfake.
Human Factors
Trust in Compromised Contact
Victim accepted invitation in good faith due to existing relationship.
Cognitive Bias and Overtrust
Victim rationalized audio issues and followed malicious instructions.
Process and Methods
Inadequate Video Verification
Lack of out-of-band verification to confirm the identity of the caller.
Weak Software Install Protocols
Victim downloaded and executed untrusted software during a live call.
Management
Weak Account Security Management
Initial compromise of the friend's account enabled the social engineering.
Regulatory Environment
Lack of Deepfake Regulations
No strict legal frameworks preventing unauthorized biometric likeness synthesis.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
