{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2022-deepfake-of-binance-communications-chief-used-to-scam-crypto-projects-on"},"incident":{"title":"Deepfake of Binance communications chief used to scam crypto projects on video calls","date":"2022-08","date_precision":"month","victim_org":"Multiple cryptocurrency projects seeking Binance listings","sector":"Cryptocurrency","country":"Multiple countries","primary_vector":"Deepfake Video Call","secondary_vectors":["Romance / Investment Scam"],"ai_involvement":"Confirmed AI-enabled","ai_notes":"Binance chief communications officer Patrick Hillmann said attackers built an AI video 'hologram' of him from his past news interviews and TV appearances and used it live on Zoom calls.","outcomes":["Wire Fraud / Financial Loss","Cryptocurrency Theft"],"loss_usd":null,"loss_note":"Losses to individual projects were not disclosed","records_affected":null,"threat_actor":null,"summary":"In August 2022 Binance disclosed that a 'sophisticated hacking team' had produced a deepfake video likeness of chief communications officer Patrick Hillmann and used it on Zoom calls with representatives of cryptocurrency projects. The impersonator offered help getting tokens listed on Binance and solicited payments and information. Hillmann said several project managers were convinced before the fraud was discovered, and that the clone was built from his publicly available interview footage.","how_it_worked":"The pretext was the single thing small crypto projects want most, a listing on the largest exchange, and the caller occupied a role that plausibly controls access to it. Contact was made over social channels and then escalated to a Zoom call, where the deepfake of a face the targets had seen in Binance media coverage supplied the trust signal that a mere email could not. Because listing discussions are routinely confidential and involve fees, requests for money and business documents did not look out of place. Victims were pushed to move fast on the implied scarcity of a listing slot, and only later checked with Binance through official channels.","lessons":"Exchange listing and partnership discussions should be confirmed through the company's published contact channels, and no vendor should treat a video likeness as proof of employment.","confidence":"Reported","sources":[{"title":"Binance exec says scammers made a deepfake hologram of him","url":"https://www.theregister.com/2022/08/23/binance_deepfake_scam/","publisher":"The Register"},{"title":"Deepfake hologram targets Binance and crypto community","url":"https://www.malwarebytes.com/blog/news/2022/08/deepfake-hologram-targets-binance-and-crypto-community","publisher":"Malwarebytes Labs"}],"entry_type":"campaign","slug":"2022-deepfake-of-binance-communications-chief-used-to-scam-crypto-projects-on","year":2022,"loss_kind":null,"url":"https://global-social-engineering-impact-da.vercel.app/incidents/2022-deepfake-of-binance-communications-chief-used-to-scam-crypto-projects-on"}}