Re:Finance worker pays out $25M after VC with deepfake CFO
by rwmj on Sunday February 04, 2024 @11:52AM
(#39251888)
It depends what the multi-party authorisation is trying to protect against. Normally you're trying to protect against insiders stealing money by authorizing a payment on their own. In this case it's quite possible that multiple people inside the company signed off on the transfer and it all happened "by the book".
[ Parent
| on HN ]
Re:Finance worker pays out $25M after VC with deepfake CFO
by hinkley on Sunday February 04, 2024 @01:11PM
(#39252730)
Social engineering is substantially about appealing to someone who can do all the steps you cannot perform from outside.
From what I understand of the literature, it’s often several interactions to gather enough information from several employees to learn to sound like you belong there, then using it all against someone with “keys” who escorts you the rest of the way.