AI-Enabled Cyberattacks Are Highly Advanced, But So Is The Next Frontier Of Cyber Defence
Over the past few years, AI has completely changed the battleground for both cybercriminals and defenders. While nefarious actors have found increasingly inventive ways to put AI to use, new research shows that AI is also modifying the abilities of security teams, transforming them into ‘super defenders’ who are faster and more effective than ever before.
The latest edition of Microsoft’s Cyber Signals research shows that, regardless of their expertise level, security analysts are around 44 percent more accurate and 26 percent faster when using Copilot for Security. This is good news for IT teams at organizations across the continent who are up against increasingly insidious threats.
Deepfakes alone increased by tenfold over the past year, with the Sumsub Identity Fraud Report showing that the highest number of attacks were recorded in African countries such as South Africa and Nigeria.
We’ve seen how these attacks, when successful, can have drastic financial implications for unsuspecting businesses. Just recently an employee at a multinational firm was scammed into paying $25 million to a cybercriminal who used deepfake technology to pose as a coworker during a video conference call.
The Cyber Signals report warns that these kinds of attacks are only going to become more sophisticated as AI evolves social engineering tactics.
This is a particular concern for businesses operating in Africa, which is still a global cybercrime hotspot. While Nigeria and South Africa estimate annual losses to cybercrime of around $500 million and R2.2 billion respectively, Kenya experienced its highest-ever number of cyberattacks last year, recording a total of 860 million attacks. What’s more, understanding of deepfakes and how they operate is limited. A KnowBe4 survey of hundreds of employees across the continent revealed that 74 percent of participants were easily manipulated by a deepfake, believing the communication was authentic.
Launching an AI-powered defense
Fortunately, AI can also be used to help companies disrupt fraud attempts. Microsoft records around 2.5 billion cloud-based, AI-driven detections every day.
AI-powered defense tactics can take multiple forms, such as AI-enabled threat detection to spot changes in how resources on the network are used or behavioral analytics to detect risky sign-ins and anomalous behavior.
The use of AI assistants which are integrated into internal engineering and operations infrastructure can also play a significant role in helping to prevent incidents that could impact operations.
It’s critical, however, that these tools be used in conjunction with both a Zero Trust model and continued employee education and public awareness campaigns, which are needed to help combat social engineering attacks that prey on human error.
The number of phishing attacks detected across African countries increased significantly last year, with more than half of people surveyed in countries such as South Africa, Nigeria, Kenya, and Morocco saying that they generally trust emails from people they know. With AI in the hands of threat actors, there has been an influx of perfectly written emails that improve upon the obvious language and grammatical errors that often reveal phishing attempts, making these attacks harder to detect.