Live data from Hacker News

The golden age of scammers: AI-powered phishing

mailgun.com

41–50 of 143 posts

Re: The golden age of scammers: AI-powered phishing

#41

On YouTube, I saw a deepfake of Elon Musk asking people to scan a QR code and buy crypto.

On twitch this a daily occurrence... and not just elon, it's mrbeast, kaicenat, and ishowspeed as well. (That is, on top of all the other "free drops/skins" impersonation that twitch can't seem to shut down)

They shut them down pretty much right away, but they pop back up right away too. And they usually viewbot to the top of the front page.

Seems like a fairly simple thing to solve though, limit ages of accounts needed to be featured etc

Re: The golden age of scammers: AI-powered phishing

#43
post #39

I expect that with AI, we'll be less able to rely on the heuristic of bad grammar to easily detect phishing. That one flaw gave the phishers away so often, and made it so obvious ...

The bad grammar is on purpose. I know of two possible reasons:

* Bayesian poisoning https://en.wikipedia.org/wiki/Bayesian_poisoning

* Weeding out poor mark candidates https://josephsteinberg.com/why-scammers-make-spelling-and-g...

Re: The golden age of scammers: AI-powered phishing

#44

Earlier quoted context omitted.

On twitch this a daily occurrence... and not just elon, it's mrbeast, kaicenat, and ishowspeed as well. (That is, on top of all the other "free drops/skins" impersonation that twitch can't seem to shut down)

They shut them down pretty much right away, but they pop back up right away too. And they usually viewbot to the top of the front page. Seems like a fairly simple thing to solve though, limit ages of accounts needed to be featured etc

I wouldn't be surprised if alot of the viewbots are using the same pool of IP addresses. Blocking VPNs, VPSes, tor, and ranges with large amounts of bans would probably help.

On the other hand, twitch keeps firing employees, so they probably just ban the stream account every 20 minutes because they don't have the manpower.

Re: The golden age of scammers: AI-powered phishing

#45

The section “Recognizing AI phishing attempts” is mournfully short, but there’s some companies out there like Jericho Security ( https://www.jerichosecurity.com ) that are working on countermeasures, at least for enterprises.

Is this a self promo?

no, it’s not…

Re: The golden age of scammers: AI-powered phishing

#46
post #18
post #5

Earlier quoted context omitted.

Yep these are super common, especially on days spacex is launching starship. They only live broadcast it on X so it allows these scammers to step in and attempt to trick people.

I watched the last starship launch on a scam YouTube stream. It was 30 minutes delayed, which a thought was because Musk wanted to promote Twitter. They said multiple times that Elon will announce something big after the launch. Directly after lift off it cut to Elon holding a speech and I only noticed this been a scam channel when he talked about the QR code and crypto.

same. stopped watching youtube live after this, realize that every live video could be a scam or distorted or modified or outdated in any way. weird.

Re: The golden age of scammers: AI-powered phishing

#47

Earlier quoted context omitted.

And yet, used extensively

When I call my bank they verify with my voice. There are further verification for meaningful actions but its still kind of crazy to be using "My Voice is my Password" this day in age.

Better than my bank, which tries to ask questions about my life from some lookup service that has incorrect information.

Re: The golden age of scammers: AI-powered phishing

#48
post #25

Earlier quoted context omitted.

Imagine getting scammed by a deepfake of Musk when you'd actually set out to get scammed by the man himself.

I mean it seems simpler to just buy a cybertruck if that's what you want

Can't lose your finger to the QR code scam. One hopes.

Re: The golden age of scammers: AI-powered phishing

#50
post #39

I expect that with AI, we'll be less able to rely on the heuristic of bad grammar to easily detect phishing. That one flaw gave the phishers away so often, and made it so obvious ...

It goes the other way now, overly verbose responses and perfect grammar sets off the warning bells.

Scammers can probably easy adapt adding some random misspellings after inference
Post reply on HN