What You Need to Know and How to Respond to the New Wave of GenAI Identity Attacks
summary
GenAI services like FraudGPT, WormGPT and EvilGPT let novices automate reconnaissance, craft targeted scams and run AB-tested attacks at scale, increasing volume, velocity and variety of identity attacks. Examples include SIM‑swap enabled authorized push payment fraud and account takeover chains built from scraped profiles; one Telco cuts losses by adding frictionary questions and breaks attacker flows. Transmit Security’s identity orchestration visual workflows consolidate 400+ consoles into conditional defenses and automated risk reports.
AI-written summary · about
chapters (11)
- 0:00Introduction to the talk
- 1:16Role of Chief Identity Officer
- 3:05About Transmit Security
- 5:13Identity security in the GenAI era
- 6:16State of GenAI identity attacks
- 8:47Adversary tools like FraudGPT
- 10:09Step-by-step identity attack methods
- 12:56Preventing AI-driven identity attacks
- 13:36Bracing for the 3Vs of attacks
- 15:45Using GenAI for defense strategies
- 16:06Closing remarks and resources
related talks
46mGenerative AI: Cyber resiliency and risk
51mBeyond the Hype: Research on How Cybercriminals Are Really Using GenAI
49mGenAI and Cybersecurity: Safeguarding the Digital Age
11mHow to Navigate Emerging AI-Driven Security
39mBeyond Recognition: A Cautionary Tale of AI and Identity Fraud
27mAl-Generated Attacks: The New Era of Threats to Authentication
30mBattling the Machine: Cutting-Edge Attacks and Defenses in Generative AI
49mChatGPT: A New Generation of Dynamic Machine Based Attacks?