Defending Against Deepfake ‘Voice Cloning’ Attacks

Voice cloning is “when someone uses AI to recreate a person's voice to include their voice patterns, intonations and speech rhythms, creating a near-perfect replica.”

A form of deepfake, cloned voices are used for voice phishing attacks (“vishing”). A cloned voice sounds real and can be a powerful tool for deception in phone calls and voicemails. They are used to impersonate work colleagues, customers, clients, and relatives, to obtain money or information.

Important steps for protection against deepfake voices include understanding that they exist, being cautious with calls (as with emails), and verifying requests through separate, known communication channels (like a text, email, or return call on a known number).

For more information, see “Phantom Voices: Defend Against Voice Cloning Attacks” here.

These tips are courtesy of the ACBA Legal Technology and e-Discovery Committee, and the September 2024 OUCH! Newsletter (a free monthly security awareness newsletter published by the SANS Institute).