Let’s call out a specific FBI warning — cybercriminals are using Americans’ stolen Personally Identifiable Information (PII) and deepfakes to apply for remote work positions. The public service announcement, published on the FBI’s Internet Crime Complaint Center (IC3) today, adds that the deepfakes used to apply for positions in online interviews include convincingly altered videos or images. The targeted remote jobs include positions in the tech field that would allow the malicious actors to gain access to company and customer confidential information after being hired.
Why do we care?
Do you know who would be in the tech field that allows actors to gain access to company and customer confidential information after being hired? MSPs and IT services companies.
This is a clever scheme – get hired remotely, get them in the door, and then open the back doors. An attacker likely doesn’t even need long. So first, be aware, and second, ensure your hiring and onboarding process protects against this.