The Morning Dev

Only the news worth knowing

‹
 
D3/100

Breach · high

Three Charged in AI Impersonation Scheme Stealing $129 Million

Tier D · Background noise – Good to know

Who’s exposed: Corporate accounting departments targeted by executive impersonation

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild

What to do

  1. Verify payment or wire requests from executives through a separate, pre-established channel before acting on them.

The Brief

  • Three suspects were charged in a scheme that used AI to impersonate CEOs and attorneys.
  • The scheme reportedly stole about $129 million, with sources also citing more than $100 million in CEO-impersonation fraud.
  • The U.S. is working on extraditing three suspects from Europe, per The Record.

Why it matters

Real-time AI impersonation of executives is being used to defraud corporate accounting departments, so finance teams should verify payment requests through independent channels.

The checklist behind the tier

Checklist · 1 of 10 yes
NoHits tech teamsJudgment: fraud against companies' accounting departments via impersonation; phishing and scams are excluded.
NoCore infrastructureJudgment: no core infrastructure software is flawed or compromised; the scheme abuses executive identities.
NoPopular toolJudgment: no widely used framework, tool, platform, OS or package is involved; CEOs and attorneys are impersonated.
YesExploited in the wildSecurityWeek: three charged in scheme that used AI to impersonate CEOs and attorneys to steal $129 million.
NoPublic exploitNeither source mentions published exploit code or proof-of-concept; no technical exploit is described.
NoRemote, no loginSources describe impersonation fraud that depends on victims acting on fake requests, not unauthenticated technical access.
NoFull takeoverSources describe fraudulent payment requests; no code execution, root/admin rights or account takeover is reported.
NoSecrets exposedNeither source reports stolen credentials, tokens, keys, configs, source code or customer data.
NoSupply chainNeither source reports compromised packages, updates, build pipelines or signing keys.
NoNo fix yetJudgment: this is a fraud campaign, not a vulnerability, so there is no patch to ship.

Timeline

  1. Three suspects charged in AI-enabled CEO and attorney impersonation scheme, reported by SecurityWeek and The Record

  2. SecurityWeek

    3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million

  3. The Record from Recorded Future News

    CEO-spoofing scammers used AI to help steal more than $100 million, feds say

Full coverage · 2 sources

First seen · 2 sources · Full story page · How tiers are decided