Arup Hong Kong $25M deepfake CFO multi-person video call scam
Date: 2024-01
Affected: Arup (UK engineering)
Attack vector: deepfake
Category: real-world
Severity: Critical

Scammers tricked a Hong Kong-based employee of British engineering firm Arup into paying HKD 200 million (USD ~25-26M) via a fake group video call in which every other attendee, including a UK-based 'CFO', was a deepfake recreation of real colleagues built from public video footage.


Mitigations:

Architectural layers (MAESTRO):