CSA Warns Against Evolving AI-Enhanced Cyberattacks

The Cyber Security Agency (CSA) has highlighted growing threats from AI-enhanced cyberattacks in its latest Singapore Cyber Landscape 2023 report. With the rise of generative AI, cybercriminals are increasingly employing deepfake technology and sophisticated phishing strategies. Financial services and government sectors are particularly targeted, with 63% of phishing attempts aimed at banking and financial services. Ransomware remains a significant threat, with notable shifts towards stealthier data exfiltration tactics.

The Cyber Security Agency (CSA) of Singapore has issued a warning regarding the increasing use of artificial intelligence in cyberattacks. As cybercriminals leverage AI to enhance social engineering and reconnaissance, the agency foresees a rise in such incidents driven by vast reserves of data used for training AI models.

According to CSA’s Singapore Cyber Landscape 2023 report, AI-generated deepfakes have facilitated scams bypassing biometric authentication and detecting software vulnerabilities. This year alone, Members of Parliament have been targeted with manipulated images, and Senior Minister Lee Hsien Loong cautioned about deepfake videos misrepresenting his views on international relations.

CSA identified the banking, financial services, government, and technology sectors as the most spoofed in phishing attacks, with 63% of these attempts targeting banking and financial services. Ransomware attacks also persist, with 132 cases reported in Singapore both in 2022 and 2023. Notably, cybercriminals are adopting exfiltration-only data extortion methods and applying pressure tactics on victim's clients to expedite ransom payments.