“It Sounds Exactly Like Your Boss”: How AI Voice Cloning Is Fueling a New Wave of Vishing Scams

This is an old-fashioned method. The attacker calls an employee and pressures them to perform an important task, such as an account issue, a tech support call, or a security alert. The attacker's goal is to exert pressure that forces the victim to share important information without thinking. Classic vishing is an old-fashioned method in which the attacker calls an employee and pressures them to perform an important task, such as an account issue, a tech support call, or a security alert. The goal is to exert pressure that forces the victim to share important information without thinking.

The scale of cyber attacks has increased significantly. With AI, an attacker can mimic someone's voice using just a few seconds of audio from a podcast, conference, or meeting. This cloned voice replicates not only tone but also cadence and pitch, making it difficult to determine whether the person on the other end is the attacker or your boss. The most dangerous attacks are those that combine email and calls. First, an "urgent and confidential" spear-phishing email arrives, followed by a call with a voice impersonating the CEO, trapping the victim.