gcdRadar
closedclosed 27 Sep 2024Breaches & attacks3 Confirmed exploitationAI

Criminal Group Uses Face-Swapping Deepfakes to Bypass Biometric Authentication

A criminal group utilized AI face-swapping technology to generate video simulations from static photos and bypass facial recognition security. The unauthorized access allowed them to breach user accounts and steal personal data for fraud syndicates.

first report
13 Sep 2024
last update
13 Sep 2024

Timeline · 1

  1. 13 Sep 2024Criminal Group Uses AI Deepfake Technology to Steal Personal Data in Hangzhou, Zhejiang

Sources · 1

Research and catalogues

  1. 2024-09-13

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
Deepfake fraudAdversarial evasion
severity
3 · Confirmed exploitation
targets
Individuals, Enterprise deployment
owasp llm top 10
no entry for these categories
dates
happened 13 Sep 2024 · first reported 13 Sep 2024
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Criminal Group Uses Face-Swapping Deepfakes to Bypass Biometric Authentication

https://gcdradar.vercel.app/incidents/criminal-group-uses-face-swapping-deepfakes-to-bypass-biomet · AIR-2024-0008 · closed 2024-09-27

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2024-09-13
- AI role: AI-enabled attack

## Summary

A criminal group utilized AI face-swapping technology to generate video simulations from static photos and bypass facial recognition security. The unauthorized access allowed them to breach user accounts and steal personal data for fraud syndicates.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-09-13: Criminal Group Uses AI Deepfake Technology to Steal Personal Data in Hangzhou, Zhejiang (https://incidentdatabase.ai/cite/806)

## Sources

- 2024-09-13 AI Incident Database: Criminal Group Uses AI Deepfake Technology to Steal Personal Data in Hangzhou, Zhejiang https://incidentdatabase.ai/cite/806

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Face-Swap Technology Used to Bypass Facial Recognition in Nanjing

    Breaches & attacks · Real loss · since 15 Oct 2024

    AI
  2. closed
    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    AI