This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
WiseTech Global CEO Richard White reported that unknown actors used AI-generated deepfake videos to impersonate him in WhatsApp calls to staff members, attempting to solicit money. The employees identified the fraud immediately and the attempts were unsuccessful. White shared this experience at an Australian Shareholders’ Association conference to highlight the security threats posed by AI.
WiseTech Global's CEO, Richard White, was targeted in multiple deepfake scam attempts where unknown actors used AI to create videos of him requesting money from staff members via WhatsApp. These repeated attempts were identified by the employees, who realized they were not speaking to the real CEO.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
The incident involved malicious actors using AI-generated deepfake videos of the CEO to impersonate him in order to scam staff members into giving them money.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was initiated by human malicious actors who intentionally used deployed deepfake technology to attempt financial fraud.
Unknown malicious actors used real-time AI deepfake video calls to impersonate the CEO of WiseTech Global in an attempt to defraud employees. The attempt was unsuccessful due to vigilant staff, resulting in zero financial loss. The incident demonstrates the evolving threat of AI-enabled social engineering targeting corporate leadership, but carries minimal national security implications.
The AI system was used as a tool to generate deepfake videos of the CEO. It performed a specific, well-defined function of video/audio synthesis based on direct inputs without autonomous planning or decision-making.
Risk Level 3. Limited Risk: The incident involves 'AI-generated content such as deepfakes', which falls under Limited Risk due to transparency and disclosure requirements.
The malicious actors used AI to generate deepfake videos and voices of the CEO to impersonate him during WhatsApp calls.
The report clearly outlines the nature of the incident, the targets, the method (WhatsApp video deepfakes), and the outcome (no financial loss). There is little ambiguity about what transpired.
None
Technology
Convincing Deepfake Technology
AI video generation allows highly realistic impersonation of executives.
Unsecured External Channels
WhatsApp allows external attackers to directly call staff members.
Data Inputs
Publicly Available Avatars
Company created AI avatars of executives for public presentations.
Human Factors
Targeting of Individual Staff
Attackers exploited individual staff members via social engineering.
Process and Methods
Ad-hoc Verification Process
Staff relied on informal Teams messages to verify executive identity.
Management
Public Promotion of AI Avatars
Management created and shared AI avatars of company leaders.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
