Live Deepfake Image Injection Evades Mobile KYC Biometrics
iProov biometric authentication
A red team demonstrated a face-swapped imagery injection attack that successfully bypassed facial recognition authentication and liveness verification models. The technique allows attackers to spoof identity verification on mobile devices.
- first report
- 7 Nov 2025
- last update
- 7 Nov 2025
Timeline · 1
Sources · 1
Research and catalogues
- 2025-11-07Live Deepfake Image Injection to Evade Mobile KYC VerificationMITRE ATLAS · atlas.mitre.org/studies/AML.CS0033
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Adversarial evasionDeepfake fraud
- severity
- 1 · Research / proof of concept
- targets
- Individuals
- owasp llm top 10
- no entry for these categories
- mitre atlas
- AML.T0015 Evade AI ModelAML.T0043 Craft Adversarial DataAML.T0073 ImpersonationAML.T0088 Generate Deepfakes
- dates
- happened 2024 (approx.) · first reported 7 Nov 2025
- origin
- MITRE ATLASDerived from MITRE ATLAS (Apache 2.0, © MITRE).
- record
- confidence 0.95 · created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Live Deepfake Image Injection Evades Mobile KYC Biometrics https://gcdradar.vercel.app/incidents/live-deepfake-image-injection-evades-mobile-kyc-biometrics · AIR-2025-0060 · closed 2025-11-21 - Lane: Research - Severity: 1 (Research / proof of concept) - Fix status: Fix status unknown - First reported: 2025-11-07 (happened 2024) - AI role: Attack on AI - Products: iProov biometric authentication ## Summary A red team demonstrated a face-swapped imagery injection attack that successfully bypassed facial recognition authentication and liveness verification models. The technique allows attackers to spoof identity verification on mobile devices. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-11-07: Live Deepfake Image Injection to Evade Mobile KYC Verification (https://atlas.mitre.org/studies/AML.CS0033) ## Sources - 2025-11-07 MITRE ATLAS: Live Deepfake Image Injection to Evade Mobile KYC Verification https://atlas.mitre.org/studies/AML.CS0033 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedCriminal Group Uses Face-Swapping Deepfakes to Bypass Biometric Authentication
Breaches & attacks · Exploited · since 13 Sep 2024
AI - closedDeepfake Technology Deepfake Doctor Impersonation Used in Financial Investment Scam
Breaches & attacks · Real loss · since 2 Dec 2025
AI - closedDeepfake of Jason Momoa Used to Defraud British Widow of $600,000
Breaches & attacks · Real loss · since 29 Nov 2025
AI - closedVoice Cloning Technology Indore Resident Defrauded by AI Voice Impersonation Scam
Breaches & attacks · Real loss · since 27 Nov 2025
AI - closedFacebook Post Used AI-Generated Video of Preacher for Money Scam
Breaches & attacks · Exploited · since 20 Nov 2025
AI - closedFacebook Deepfake of Greek Finance Minister Kyriakos Pierrakakis Used in Investment Scam
Breaches & attacks · Exploited · since 14 Nov 2025
AI