FBI Says People Are Using Deepfakes To Apply To Remote Jobs (gizmodo.com) 47
An anonymous reader quotes a report from Gizmodo: The FBI wrote to its Internet Crime Complaint Center Tuesday that it has received multiple complaints of people using stolen information and deepfaked video and voice to apply to remote tech jobs. According to the FBI's announcement, more companies have been reporting people applying to jobs using video, images, or recordings that are manipulated to look and sound like somebody else. These fakers are also using personal identifiable information from other people -- stolen identities -- to apply to jobs at IT, programming, database, and software firms. The report noted that many of these open positions had access to sensitive customer or employee data, as well as financial and proprietary company info, implying the imposters could have a desire to steal sensitive information as well as a bent to cash a fraudulent paycheck.
What isn't clear is how many of these fake attempts at getting a job were successful versus how many were caught and reported. Or, in a more nefarious hypothetical, whether someone secured an offer, took a paycheck, and then got caught. These applicants were apparently using voice spoofing techniques during online interviews where lip movement did not match what's being said during video calls, according to the announcement. Apparently, the jig was up in some of these cases when the interviewee coughed or sneezed, which wasn't picked up by the video spoofing software. Companies who suspect a fake applicant can report it to the complaint center site.
What isn't clear is how many of these fake attempts at getting a job were successful versus how many were caught and reported. Or, in a more nefarious hypothetical, whether someone secured an offer, took a paycheck, and then got caught. These applicants were apparently using voice spoofing techniques during online interviews where lip movement did not match what's being said during video calls, according to the announcement. Apparently, the jig was up in some of these cases when the interviewee coughed or sneezed, which wasn't picked up by the video spoofing software. Companies who suspect a fake applicant can report it to the complaint center site.
good looking people get jobs (Score:4, Interesting)
Re: (Score:1)
I said the exact same thing to my ex!
Bad culture fit.
Re:good looking people get jobs (Score:5, Interesting)
So while doing this to gain insight and possibly protect against discrimination is a noble cause, the way it's being done by these actors is certainly a nefarious cause.
Re: (Score:2)
Still not necessarily nefarious. If you were in reality a older woman, from a minority group, with a clearly ethnic name, then masquerading as a younger white male could give you considerably better odds of landing the job. If you used your own SSN you'd be giving the game away right off the bat. I'm pretty sure that when your SSN is checked for employment it isn't just a is this number legit, it'll be matched against a name at the least and quite likely gender and date of birth.
Nah, I'm ugly (Score:2)
Nah, I'm ugly as heck and there's always a bidding war for me. Your looks aren't the problem.
Unless of course you're applying for a job as a stripper. :)
Re: (Score:2)
Change your pronoun to "they" or pick the right minority and there are workplaces right now that would hire you in an instant , even with only middling technology credentials, to demonstrate their "diversity". Being a married man and a sole breadwinner has lost its appeal in many politically conscious technology companies. and being an older white engineer means you might tolerate a lot less of certain kinds abuse from middle managers.
Re: (Score:2)
As might I, if I were looking. Snippng 20 years off my appearance would still allow pl;enty of career experience with contemporary technology.
Re: (Score:2)
I heard of a university department where the professors they hired over the pandemic were noticeably shorter than the ones hired beforehand. The difference? Interviews were done over Zoom, making it harder to see how tall the candidate was.
We really do discriminate over the dumbest things. You'd think an academic department would understand that your height doesn't affect how good your research is, but apparently not.
The virtual road to success (Score:4, Interesting)
The successful ones haven't been reported yet.
if only (Score:5, Interesting)
...We had a process for reviewing and then actually interviewing people in person?
The moral of the story is that if you have an impersonal,, automated hiring process that treats people like commodities, maybe you deserve to get tricked/burned a few times.
Re: if only (Score:2)
Do the victims of this identity theft deserve the IRS chasing them for taxes?
Re: (Score:2)
Note to self, When using deepfakes of others to get remote work *always* make sure its a contract position where I get a 1099 because screw everyone.
Re: (Score:2)
Re: (Score:2)
What's why people who like remote work should be bothered by this - the more it is associated with fraud, the less available remote work will be, and the lower it will pay.
Re: (Score:3)
Many modern workforces deliberate segregate the actual staff in a department from the hiring process, "to avoid bias" but in reality to preserve the role of HR bureaucracy. It makes fraud easier, especially when hiring inexpensive off-shore consultants.
Re: (Score:2)
And yet no one cares because everyone seems to have adopted quite the impersonal process. Get burned? Oh well. Dismissed as the cost of hiring meatsacks.
And if it becomes too burdensome, they'll consider automation to remove the meatsack requirement before ever admitting an impersonal process, was a mistake.
some staffing agencies have been doing this for ye (Score:3)
some staffing agencies have been doing this for years.
Or they have one guy who does this for there full over seas team.
Real Live Person (Score:3)
How about a position that has access to sensitive customer or employee data, as well as financial and proprietary company info be interviewed for in person. Even if it's a case of just having the successful applicant show up in person to establish identity and credentials. Maybe HR just likes WFH too much these days.
Re: (Score:2)
What positions do you think can do remote work without having access to sensitive employer or customer data? Certainly not developers, document herders, anyone doing non-trivial customer support. Almost all positions would require an in-person appearance.
Re: (Score:2)
Nope!
Obviously, you've been under a rock for the past two years.
Re: (Score:2)
I work as a security consultant and pentester in a very security-conscious, financial group. Even here there are few areas that you can't access via VPN tunnel.
Yes, you have to physically appear in front of HR and security at least once to establish identity, and to pick up the more sensitive equipment in person, but access to nearly all information is possible remotely. Has to be, pretty much, considering how decentralized the whole deal is, and the requirements of PCI-DSS pretty much make anything else im
Identity theft is bad but... (Score:1)
.. to be honest, deepfaking or photoshopping your appearance for an interview isn't a bad idea at all. It's a good way to avoid discrimination. I don't think companies can fire you for looking different than when they hired you, can they?
Re: Identity theft is bad but... (Score:3)
Re: Identity theft is bad but... (Score:1)
Re: (Score:1)
I don't think companies can fire you for looking different than when they hired you, can they?
Given that women wearing heavy makeup represents the OG deepfake, I kind of doubt it.
Re: Identity theft is bad but... (Score:3)
Change the color, maybe alter the voice, very simple stuff so people don't use phy$ical attributes (slam..click) to discriminate against you.
Re: (Score:2)
I think that would depend on the job you apply for. If it's a job where you have physical contact with customers and you aren't what could be considered "presentable", it may well be reason for termination.
I mean, take a look at this [youtube.com] and ponder for a moment how much you'd trust a bank that hires them as tellers.
How about that... sports team, eh? (Score:1)
In order to get equal pay, a woman might pretend to be a man. Lets see how the reveal afterwards goes over.
Re:How about that... sports team, eh? (Score:5, Interesting)
I know someone who does that when remote contract coding jobs. Says it's just so much easier to pretend to be male. Aside from the discrimination, she was getting "job interviews" that were suspiciously like first dates.
Re: (Score:2, Troll)
It doesn't actually work that way. The pay gap is almost entirely due to men working longer hours for their entire work-life. The infamous 22% wage gap is for lifetime earnings, not hourly earnings, and very many men work many, many more hours weekly than many, many women.
Re: (Score:2)
I know a lot of people think they know the results, but this sounds like a way to actually know.
Intro Video (Score:3)
"How do you do, fellow programmers of software writing!"
Re: (Score:2)
Re: (Score:1)
Inadvertent but now that you mention it, so true!
Re: (Score:2)
Identity Theft for one.
Re: (Score:2)
I don't have any more current pictures of me.
Who gets the keys to the kingdom on day one? (Score:2)
This sounds weird to me. My first job at a defense contractor, I wasn't given access to the classified material for many weeks until my security clearance went through. What idiot gave these job applicants access to sensitive information on day one?
Live by the sword... (Score:2)
Well, if you don't want to interview people in person, and use some so-called AI to screen applicants, you reap what you sow.