Jake Moore’s Post

From October, UK banks will be 💯% liable for #scam losses - even when the payment is authorised by the customer. (It doesn’t mean you can all go and get scammed now! 😅) Authorised Push Payment fraud is where a victim is tricked into making a large bank transfer to an account posing as a legitimate organisation. But in a few months, people will be fully reimbursed and the costs will be equally divided between the bank managing the customer's account sending the funds and the bank operating the account receiving them. 🤔 Not only could this force banking costs to rise, I predict we could see an increase in attempts as fraudsters will know the money is available. I also think we may see an uptick in first-party fraud where the actual account holder uses their own credentials for fraudulent means.

Having always been fascinated with crime, 20 years ago this week I chose the right side of the law and landed a job in the police force. Since then, over 40% of all crime is now cybercrime and fraud and I sometimes feel we are fighting a losing battle. But we are, in fact, making headway in the right direction and I am still as captivated as I was all those years ago. However, some things have not changed: 👩💻 Socially engineering (manipulating you and your emotions), 🦹♂️ Criminals go to any length to find any loopholes in your security, on and offline, 🏴☠️ Motivating factors haven’t changed, 🐠 Phishing attacks still remain at the forefront of attacks, 🗝️ People in your organisations will still think their password is strong enough and believe they won’t get breached. I often wonder how good a criminal I might have been but I’ll be forever grateful that my mum gave me that look and pointed me in the direction of the local police station for all the right reasons.

Waking up with everyone from my hotel room 👋It’s been a crazy few days but an even crazier week in cybersecurity… 🚨 Ticketmaster data breach, 🚨 Santander data breach, 🚨 London Hospitals ransomware attacks, 🚨 TikTok account compromises, 🚨 Plus: 361 million usernames and passwords stolen in ‘combolists’ and released on Telegram At #Infosec I’ve been chatting to some of the best brains in the business including Otto from Pen Test Partners. I wonder if he can help stop all these cyberattacks?! 🤔 🏆 And to top off the week, our ESET blog site won an award whoop whoop!!

So I ended my talk on #AI security at our ESET tech conference last week with a #deepfake video of our CTO Juraj Malcho telling everyone to remind our CEO that I should get a big fat pay rise... Work smart, not hard, kids! 🙃

It’s not everyday you meet the co-inventor of the iPod / iPhone (Tony Fadell) and then stargaze and chat with two astronauts (Dr Kathryn Thornton and Chris Hadfield) in the most spectacular setting.

Do I get nervous? Hell yeah! But do I love it? ABSOLUTELY!! When I was asked in January to host and present at this year’s biggest ever ESET World conference I said yes without any new content to offer 😅. I spent the next 4 weeks not sleeping, trying to come up with an idea. Luckily, my friend let me conduct an experiment to hack his LinkedIn and post a #deepfake of him to all his contacts. I also got into the office CCTV footage and swapped my face with someone else’s… and the results were perfect! All that pressure and worry paid off yesterday and I was able to deliver my favourite ever talk. And I loved every minute!

📱Hacking someone's WhatsApp account used to be worryingly easy… but fear not, that’s no longer the case!🔒 Passkeys are a more secure (and easier!) way to log into your account using Face ID/Touch ID/device passcode and they are finally available on iOS. (They’ve been on Android for a few months). #Passkeys let you bypass the traditional login method that includes passwords and two-factor authentication via SMS on your registered phone number. So being #WorldPasswordDay why not ditch the password and set up your passkey now!👇 (Only on iOS 17 or later) Settings > Account > Passkeys NB the Passkeys update roll-out is being conducted in phases and will gradually extend to all global regions and phones.

I have to share this story from Holly Foxcroft about kids using AI intuitively (and I totally would have tried this as a teenager!) So school kids have been using AI voice creation software and calling their school offices pretending to be their parents and leaving messages about how their child is ill and needs a day or two off!! I can honestly say this is one of the funniest / most worrying / intuitive uses of AI I’ve heard yet.

My friend Jason Gault of TeamJobs challenged me to create a deepfake of him and post it on his LinkedIn in a misinformation experiment. It received a lot of attention and it even got sponsorship offers! It’s insane what AI technology can now create but luckily this was a safe way of proving its capabilities. Here is a follow-up #deepfake of Jason - and to prove it, I've made it say something he would NEVER say! 😂   With video now being the most popular form of content and elections coming up around the world, it’s more important than ever to verify what you are interacting with.