Deepfakes & Synthetic Media for Social Engineering

Three seconds of audio clones a voice. One photo drives a live face-swap on a video call. The $25M Arup wire fraud ran on a fully deepfaked meeting. Practical guide: voice-clone workflow (XTTS/RVC), OSINT audio collection, real attack chains, KYC/biometric bypass, detection tools (FakeCatcher/Hive/Sensity), C2PA provenance, and the out-of-band verification procedures that actually stop it.