Morningstar AI and Deepfakes Fueling Account Takeover Fraud
Article Content
- •30% of fraud failures involve fake identity documents.
- •Traditional identity verification methods are increasingly ineffective.
- •IC-Corp's new technology focuses on individual device authentication.
Cybercriminals are increasingly using AI and deepfake technology to facilitate account takeover attacks, as reported by Microblink. Their data indicates that 30% of fraud failures involved fake U.S. identity documents, which help criminals impersonate legitimate users. The Javelin Strategy & Research's 2026 Identity Fraud Study highlights that even partial data leaks can lead to identity theft. Traditional identity verification methods are becoming inadequate, as they assume trust remains constant over time. Microblink emphasizes the need for businesses to adapt their security measures to account for evolving fraud tactics. Meanwhile, Individual Centricity Corporation (IC-Corp) has received patent approval for a new identity verification technology designed to combat deepfake fraud by authenticating users based on their individual devices rather than centralized databases. This technology aims to enhance security by ensuring that the identity of the user remains consistent throughout interactions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Arup in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is the impact of deepfake technology on account security?
How does IC-Corp's technology work?
What should organizations do to enhance their security against these threats?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…