AI Scam Alert: The country's cybersecurity agency, CERT-In, has issued an alert to both businesses and general users regarding the rising prevalence of AI-driven scams. The agency has also suggested several preventive measures.

AI Scam Alert: In recent times, incidents of scams facilitated by Artificial Intelligence (AI) have witnessed a significant surge. In light of this, the country's cybersecurity agency—the Indian Computer Emergency Response Team (CERT-In)—has issued a warning. The warning states that, with the aid of AI, cybercrimes of a far more sophisticated nature are now being executed. Attackers no longer require extensive time to identify vulnerabilities; they can now target systems and users on a scale far larger than ever before. Consequently, both general users and businesses have been advised to remain vigilant against these scams.

CERT-In Highlights Grave Threat

In its alert, CERT-In noted that AI systems now enable the immediate detection of vulnerabilities within software. Thanks to AI, attackers can identify weaknesses in APIs, cloud services, and enterprise systems to steal credentials. Furthermore, the risk of phishing scams and impersonation-based fraud has also escalated. Attackers are perpetrating scams through emails, messages, voice calls, and video calls across various languages. As a result, users are mistaking these fraudulent communications for legitimate ones and inadvertently sharing their sensitive information.

AI Scams No Longer Require Specialized Skills

The warning emphasizes that AI has significantly simplified the execution of cybercrimes. Even attackers with limited technical skills can now launch severe attacks, posing a massive threat. The risks have expanded to encompass everything from unauthorized system access and service disruptions to data breaches and financial fraud.

Advisory for Businesses

To mitigate the risk of AI scams, CERT-In has advised companies to maintain vigilance at multiple levels. Organizations have been urged to actively monitor their systems, logs, and network activity. Additionally, they have been advised to disable unnecessary services, ports, and protocols. Meanwhile, cost-effective and efficient measures have been suggested for MSMEs. These include enabling automatic operating system updates and utilizing multi-factor authentication.

Advice for General Users

In its warning, the government agency stated that personal devices and accounts are also increasingly being targeted. To protect against this, users should keep their phone software updated. Furthermore, individuals have been advised to use strong and unique passwords and to utilize multi-factor authentication wherever possible.