News for hackers. Stuff that matters.
Re:Finance worker pays out $25M after VC with deepfake CFO by citizenpaul on Sunday February 04, 2024 @06:31PM (#39255636)
>tell the CEO

Good luck with that.

I've had a CFO that didn't talk to tech people except through proxy have a "tell your mom to pass the potatoes" style meeting with his secretary as medium. Yes I stood there he talked to his secretary and repeated what each of us said 5 feet away from each other. This was a large bank.

I've had a general council yell with spittle at me because I suggested that it was probably a bad thing that the IT Dept was effectively acting as power of attorney for the company by doing digital signing for him and he should probably learn how to do it himself for legal reasons.

Re:Finance worker pays out $25M after VC with deepfake CFO by acdha on Sunday February 04, 2024 @08:07PM (#39256194)
Yes, that’s why I described it as a management responsibility. That kind of dominance culture is very common and it basically ensures this kind of stuff will keep happening, similar to how all of the phishing training in the world is largely cancelled out by not requiring partners and vendors to have better email practices. It might take that CFO featuring in a crime like this one to get their attitude to change.
Re:Finance worker pays out $25M after VC with deepfake CFO by viraptor on Monday February 05, 2024 @06:21AM (#39259960)
When you get to choose a potentially career limiting move by speaking to a CFO or a freedom limiting move by doing a potentially illegal thing they say... It may be a good idea to do the first one unless you're in really bad situation with work availability.

If they can throw you under a bus because you raise a valid issue, what are the chances they'll protect you when some fraud paperwork gets signed by the IT dept (so you).

Re:Finance worker pays out $25M after VC with deepfake CFO by roughly on Monday February 05, 2024 @05:56PM (#39268375)
Also if they throw you under the bus because you refused to break company policy, you can sue them for wrongful termination.
Re:Finance worker pays out $25M after VC with deepfake CFO by citizenpaul on Thursday February 08, 2024 @06:17PM (#39309150)
I'm just saying the problem is basically systemic. Powerful people in charge are going to do what they are going to do. Very few will voluntarily place restriction upon themselves even for their own good. The person that sent the money probably did it because the CFO had a history of acting like a child/irrationally/short fuse.

Very few CEOs are going to make people feel comfortable telling them no.

My anecdotes were to illustrate its widespread if I've personally encountered it multiple times. Also just to entertain.