Threat Research Team

Gain valuable insights from industry leaders as they provide their perspectives on navigating the evolving digital landscape, addressing emerging cyber threats and trending topics that affect us all.

Cyber Safety Chief Technology Officer

Leadership Perspectives

<p>Today, technology is deeply woven into our daily lives and is advancing at an extraordinary pace. All of the progress in tech, however, comes with an equal measure of risk. In 2024, large-scale data breaches dominated headlines, while AI pushed the boundaries of reality, reshaping how we work, create and interact with technology.&nbsp;</p><p>With all of this, 2025 is set to be a year of profound transformation in the cybersecurity landscape.</p><p>At Gen, we don’t wait to respond to change; we anticipate it. Our experts are looking ahead to the trends that will redefine the industry while harnessing AI for good to ensure safety and trust remain at the forefront. <strong>Here’s what we see on the horizon.</strong><br>&nbsp;</p><h2>AI Will Blur the Line Between Reality and Fiction</h2><p>Artificial intelligence isn’t just a powerful tool — it’s becoming a force that reshapes how we perceive the world. But, as it becomes better, smarter, more realistic and accessible, AI will increasingly blur truth and deception, making it more difficult than ever to decipher what’s real.</p><h3>Hyper-Personalized Realities</h3><p>AI-powered Large Language Models (think ChatGPT, Gemini, etc.) are advancing at an incredibly fast pace, offering hyper-personalized interactions that could alter perceptions and decision-making.&nbsp;</p><p>Imagine a world where AI doesn’t just answer your questions but anticipates your&nbsp;needs.</p><p>But here’s the trade-off: to unlock this seamless, personal assistant experience, people are handing over everything to AI, including calendars, messages and apps. Hyper-personalization comes with a cost: the erosion of privacy and autonomy. Are you willing to lose privacy for convenience?&nbsp;</p><p>This raises critical ethical questions: Who controls the narratives AI presents? How do we safeguard independent thought in a world increasingly influenced by machine intelligence?</p><p>We believe that AI-driven solutions should ensure transparency and accountability, giving individuals tools to navigate these hyper-realities without losing sight of two key things: truth and trust.</p><h3>AI in Sensitive Roles</h3><p>We suspect that AI will also infiltrate areas once considered uniquely human, such as parenting and education. Imagine an AI tool stepping in to mentor a child, help with homework, or even act as a digital babysitter. While it offers unlimited time and patience, it challenges the boundaries of what roles and responsibilities should be left to humans.</p><p>The implications are profound:</p><ul><li><strong>Redefining Relationships:</strong>&nbsp;AI is poised to transform the family, from parenting and pets to companionship, by taking over routine tasks like homework help and schedule management or even emotional connections. Bonding moments – like bedtime stories or daily conversations – slip away. With robotics bringing AI into the physical world, the stakes grow higher: robotic pets replacing real ones, AI nannies soothing children and robot companions filling emotional gaps.&nbsp;</li><li><strong>Shaping Young Minds:&nbsp;</strong>As AI becomes more engaging, children may form stronger bonds with machines than caregivers, shifting family dynamics. While AI offers personalized guidance and companionship, overdependence could limit kids’ social and emotional growth, making real relationships harder to navigate. Families must balance the benefits of AI with the need for genuine human connection.</li></ul><p>The broader societal question is this: how much influence will we allow AI to have in shaping the next generation?<br>&nbsp;</p><h2>The Deepfake Revolution</h2><p>Deepfakes — AI-generated media designed to mimic real people — are becoming so sophisticated that even experts may struggle to distinguish truth from fabrication. In 2025 we expect increases in:</p><ul><li><strong>Personal Attacks:&nbsp;</strong>Scorned individuals could use deepfakes to harass or extort others, not just by targeting the individual directly but by creating convincing fake media of family members or friends. These fabricated videos or audio clips could be used to manipulate victims emotionally, spread false rumors, or even strain personal relationships, amplifying the psychological toll of such attacks.</li><li><strong>Political Manipulation:</strong> Governments and bad actors may leverage deepfakes to divide, spread disinformation and destabilize societies. Imagine a fake speech from a world leader announcing false policies — such content could ignite panic, erode trust in institutions and manipulate public opinion. Deepfakes could also target journalists or political opponents, fabricating damaging scandals or discrediting reliable sources, undermining public confidence in the media. This highlights the need for a system where authenticity is non-negotiable -- where digital signatures could become the standard to restore trust.&nbsp;</li><li><strong>Financial Fraud:</strong> Deepfake videos or audio clips of executives could be used to impersonate authority figures, convince employees to transfer funds, reveal sensitive company information or approve unauthorized transactions. For instance, a Business Communication Compromise (BCC) can happen when a convincing video of a CEO instructing a financial officer to expedite a payment bypasses typical safeguards, due to its perceived authenticity and established trust. The threat doesn’t end with internal fraud; deepfakes could also target investors or clients, undermining trust in corporate communications and causing long-term reputational damage. These attacks could ripple through supply chains and financial systems, creating chaos on an unprecedented scale.&nbsp;</li></ul><h2>Data Theft: The Multi-Faceted Threat to Identity</h2><p>The digital world runs on data and cybercriminals are mastering the art of leveraging it as a multifaceted threat to target individuals, organizations and societies alike.</p><h3>Comprehensive Profiles for Targeted Scams</h3><p>Large-scale breaches and public data sources provide criminals with the raw materials to build highly detailed profiles of their victims. &nbsp;This goes beyond just a first and last name or email address – criminals piece together “who” their targets really are. They know where you work, what you do for a living, your hobbies and habits. With this intimate understanding and detailed information, they can:</p><ul><li>Craft hyper-personalized phishing attempts</li><li>Launch convincing extortion schemes</li><li>Impersonate trusted services to exploit victims’ trust</li></ul><p>For example, attackers using images of victims’ homes during sextortion attempts demonstrate how cybercriminals are evolving their psychological manipulation tactics.</p><h3>Forgotten Logins, Fresh Targets: How Old Accounts Open New Doors for Hackers</h3><p>The average individual has hundreds of online accounts. Besides the active ones, there’s also a plethora of aged accounts that are long gone, such as old email addresses from Hotmail or social accounts like MySpace. These accounts can be forgotten or abandoned. Combined with the low adoption of multi-factor authentication (MFA) and the widespread practice of password reuse, these neglected accounts become gateways for attackers. Cybercriminals can pivot from one breached account to another, collecting more personal information with each step and enabling even more precise and damaging attacks.</p><h2>Scams Enter the Era of Hyper-Personalization</h2><p>2025 marks the dawn of hyper-personalized scams. Cybercriminals no longer rely on broad attacks and wait for someone to take the bait. Instead, they use meticulously crafted profiles built from breached data, public records or dark web scraps to tailor their attacks. They’re not random. They’re designed to feel personal, disarming and hard to resist because they rely on your specific data – your own identity.&nbsp;</p><p>These scams won’t feel like scams. They’ll feel real. Here are some examples:</p><ul><li><strong>Tailored Manipulation</strong>: Imagine receiving a message referencing a conversation you had last week or mimicking a friend’s tone perfectly. Attackers will use personal details to craft scams so convincing they disarm even the most vigilant.</li><li><strong>Psychological Exploits</strong>: Cognitive biases like urgency, trust, and fear will be turned against us. Emotional triggers — like a fabricated crisis involving a loved one — will make hesitation feel impossible.</li><li><strong>Platform Integration</strong>: Social media and messaging apps will become prime battlegrounds, with scams that look indistinguishable from legitimate interactions.</li></ul><p>This is the reality of where scams are heading. The lines between genuine and fraudulent will blur, forcing us to rethink how we defend against threats. Technology together with awareness, education, and proactive resilience will be critical to protecting ourselves and our communities in this new era of deception.</p><h2>Financial Theft: The New Frontier of Exploitation</h2><p>The war on financial security is escalating, with attackers blurring the boundaries between digital fraud and physical coercion. 2025 will see financial theft reach unprecedented levels, fueled by innovation in both technology and tactics.</p><h3>A New Breed of Digital Fraud</h3><p>Cybercriminals are wielding sophisticated tools to undermine trust and exploit vulnerabilities:</p><ul><li><strong>Deepfake Scams</strong>: Picture a video of a trusted leader or celebrity endorsing a high-return investment. These convincing forgeries will draw in victims by the thousands, fueling a new wave of financial deception.</li><li><strong>Voice-Cloned Lies</strong>: Fraudsters will impersonate government officials, announcing fake income distributions or policy updates, driving victims to malicious platforms.</li><li><strong>Crypto Scams on Steroids</strong>: From fake giveaways to fabricated trading platforms, cryptocurrency will remain a prime target for attackers hungry for unregulated, high-reward opportunities.</li></ul><h3>Where Cybercrime Gets Personal&nbsp;</h3><p>Financial theft is no longer confined to just the digital world. Now, it feels more and more personal. Spyware and malware will silently monitor devices, giving attackers backdoor access to banking apps and bypassing traditional security measures.</p><p>This evolving threat challenges us to rethink financial security. It’s not just about protecting devices; it’s about protecting the people behind them. The only way forward is bold innovation, collective vigilance, and an unwavering commitment to staying ahead of those who prey on trust.</p><h2>Our Vision for the Future</h2><p>The challenges of 2025 demand bold action, innovative thinking and a commitment to protecting what matters most: trust. And while threats are undoubtedly getting more complex, the future is bright, and technology will play a pivotal role in making the world safer, smarter and more secure. At Gen, we’re not just observing these challenges; we’re staying ahead of them. With products like Norton Genie for scam detection, Norton 360 Deluxe and Avast One for all-in-one protection, and LifeLock to restore what’s lost, we’re safeguarding your digital world and Powering Digital Freedom.</p><p>While technology like AI holds the promise of a more secure and innovative future, uncertainty often stands in the way of progress. This is where we see opportunity: to educate, empower and lead. By helping others understand and embrace AI responsibly, we can ensure it becomes a force for good — strengthening our defenses while driving innovation.</p><p>Make no mistake — new technology breeds new risks. However, it also serves as a powerful catalyst for positive change, paving the way to a safer and brighter future.</p><p>With every new tool, every evolving threat, and every transformative idea, we’re shaping a future where innovation and security go hand in hand.</p>

Exploring Tomorrow’s Threats, Today’s Solutions: Predictions for the Cybersecurity Landscape in 2025

Predictions 2025: Navigating the Future of Cybersecurity

<p>As technology evolves, so does our digital landscape. Many of us have witnessed this transformation firsthand; we can still remember the sound of dial-up internet and are also part of today's "always-on" culture. Most of the world is constantly connected, even expecting instant responses via text, DM or Microsoft Teams. However, increased connectivity comes with its own challenges. Scams, once confined to traditional, more obvious methods, have adapted to leverage some of the latest technology for more sophisticated and clever schemes unlike ever before.&nbsp;</p><p>When it comes to election security, the first thought often centers around the risk of hacking voting systems or machines. Artificial intelligence (AI) technology makes it easier than ever to manipulate public opinion without needing to breach highly secure systems. As AI continues to advance, its potential to affect nearly every facet of our daily lives—including news, careers, trends, social media and elections—cannot be underestimated.</p><p><strong>A Global Outlook&nbsp;</strong>&nbsp;</p><p>2024 has deemed itself the ultimate election year with 64 countries plus the European Union all headed to the polls this year. That means there’s even more at stake for the vast majority of people who can and will participate in free and fair elections in their country.&nbsp;</p><p>We’ve already seen an&nbsp;<a href="https://www.ic3.gov/Media/News/2024/240709.pdf">FBI report</a> on state-sponsored media leveraging software to manipulate public opinion through social networks.&nbsp;</p>

<h2><strong>The Influence of AI </strong> &nbsp;</h2><p>AI seems to touch every aspect of our digital existence today and is spreading through personalized advertising algorithms and even for our personal content curation. (Admit, you can hardly scroll on LinkedIn without an ad or a tip on how to use AI.)  &nbsp;</p><p>One <a href="https://vm.tiktok.com/ZGeVGdeLc/">deepfake video</a> features a journalist alongside candidates from six different Spanish political parties. Although this video is intended for fun, as indicated by its hashtags, it highlights both the potential and believability of AI technology.&nbsp;&nbsp;</p>

<p>However, AI's impact extends beyond convenience and efficiency; it also poses significant risks. For instance, AI algorithms are already being utilized to manipulate elections by spreading misinformation and propaganda; be it through automated bots, curated images or deepfake videos. We see it on social media constantly. And the real problem is determining real versus fake. With such convincing technology, AI has the potential to erode public trust and undermine democratic processes. &nbsp;</p><h2><strong>Proactive Measures to Combat Misinformation</strong>&nbsp;</h2><p>As we approach another election year, the issue of <a href="https://www.gendigital.com/blog/news/innovation/ai-disinformation">AI misinformation</a>, particularly deepfakes, has become a pressing concern. Although the U.S. federal government has yet to take action against deepfakes, there are states that are taking measures into their own hands. One U.S. state, Colorado, has proactively implemented measures to combat the spread of these deceptive technologies. The state now mandates that campaign ads featuring audio, video, and other AI-generated content include prominent disclosures.&nbsp;</p><p>The law treats deepfakes — fake videos or images created by AI showing people doing or saying things they didn't actually do — as if the people were being forced to act against their will. It highlights the risk of candidates’ reputations being "irreparably tainted" by fabricated messages and requires "clear and conspicuous" disclosures when AI-generated content is used to portray candidates within 60 days of a primary election or 90 days of a general election.&nbsp;</p><p>The new law empowers individuals to file administrative complaints with the Secretary of State’s Office for election law violations and gives candidates the ability to sue over the dissemination of deepfakes. Colorado’s proactive stance sets a precedent for safeguarding the integrity of the electoral process and protecting voters from being misled by manipulated content, ensuring a fair and transparent election.&nbsp;</p><h2><strong>Elections Under Siege</strong> &nbsp;</h2><p>How would AI impact our elections? Well, consider this: elections have already faced cyberattacks in the past through digital channels. &nbsp;</p><p>Historical data, including analyses of past election years and telemetry from significant events, show the severity of the issue and emphasize the need for proactive measures to safeguard electoral integrity. &nbsp;</p><p>We don’t have to look too far to find evidence. Case in point: the Polish Parliamentary Elections of 2023. Just two days before the elections, Polish media outlets released a video depicting a police intervention at one of the three polling stations in Poland. The intervention was prompted by an anonymous bomb threat received before the scheduled voting day. However, accounts associated with the Russian FIMI infosphere quickly seized upon this video, reframing its context to suggest that explosions had already taken place at the polling station. The incident exemplifies a calculated effort to stoke fear surrounding the purported bomb threats directed at polling stations, potentially discouraging voter turnout. &nbsp;</p><p>Recently, an AI-generated version of Indian Prime Minister Narendra Modi was spread on WhatsApp.  &nbsp;</p><p>In the United Kingdom, the state of British healthcare and the National Health Service was a hot topic during the pre-election period. The urgency of this issue has been exploited by cybercriminals, leading to a 208% increase in URL-based election attacks in 2024 compared to 2023. These attackers have primarily targeted healthcare topics to deceive and manipulate voters.&nbsp;</p><p>Similarly, in Germany, we have observed an alarming increase in blocked attacks on URLs with politically controversial content. These attacks occurred in two significant waves: the first at the turn of the year and the second from April up to the election week. From the beginning of the pre-election period in December 2023 to the end of May 2024, the monthly number of blocked attacks surged by 233%. When comparing the entire pre-election period of the last six months to the same months of the previous year, there is an astounding year-on-year increase of nearly 5000% in blocked attacks. These attacks, originating from politically charged websites, include malicious malvertising, phishing, and push notifications designed to install malware or steal sensitive personal data.&nbsp;</p><p>The 2024 European elections have seen a dramatic rise in politically based cyberattacks on German users, with an increase of almost 5000%. Cybercriminals have employed various tactics, including fake ads, phishing, and dangerous push notifications, to exploit politically charged content. Keywords and names were frequently used as clickbait to lure victims. This significant surge in political-based attacks underscores the need for robust cybersecurity measures to protect the integrity of the electoral process and ensure a safe digital environment for voters.&nbsp;&nbsp;</p><p>Below are a few examples of elections that have faced some form of cyberattack: &nbsp;</p>

<h3><strong>Types of Election Scams</strong> &nbsp;</h3><p>A myriad of election scams exists, ranging from seemingly innocuous political donation solicitations to sophisticated phishing attempts targeting voter registration databases. AI-driven scams exacerbate the threat landscape, as malicious actors leverage advanced algorithms to create videos, text and even email scams designed to sway public opinion and manipulate electoral outcomes. But AI isn’t the only threat to elections.&nbsp;</p><p>Potential threats to elections: &nbsp;</p><ul><li>Tampering with registrations, votes &nbsp;</li><li>Committing voter registration fraud&nbsp;</li><li>Hacking candidate laptops, email, social accounts &nbsp;</li><li>Hacking of campaign websites &nbsp;</li><li>Leaking of confidential info &nbsp;</li><li>Hacking government servers, comms networks,  &nbsp;</li><li>Spreading misinformation on the election process, parties, candidates or results &nbsp;</li><li>Altering results &nbsp;</li><li>Hacking internal systems used by media or press  &nbsp;</li></ul><p>Here's what scams could look like to voters: &nbsp;</p><ul><li>Political donation scams &nbsp;</li><li>Fake survey or polls &nbsp;</li><li>Voter registration phishing  &nbsp;</li><li>Scam texts &nbsp;</li><li>Social media posts&nbsp;</li><li>Fake data leaks&nbsp;</li><li>Misinformation campaigns&nbsp;</li></ul><h3><strong>Spotting the Scams&nbsp;</strong>&nbsp;</h3><p>As scams become increasingly sophisticated, it is important to equip individuals with the necessary tools and knowledge to identify and mitigate any possible threat.  &nbsp;</p>

<h2><strong>Looking Towards the Future</strong> &nbsp;</h2><p>Emerging technologies, such as deepfakes, present both opportunities and risks. (Like all technology, it’s good when put in responsible hands.) Though these tools can be exploited maliciously, they also hold the potential for positive applications.    &nbsp;</p><p>Here, we delineate both the benefits and risks stemming from AI involvement in the electoral process. &nbsp;</p><p>Benefits of AI include: &nbsp;</p><ul><li>Enhanced security: AI presents an opportunity to reinforce cybersecurity measures. &nbsp;</li><li>Voter engagement: Leveraging AI-driven chatbots and virtual assistants can foster enhanced voter engagement by facilitating communication, ensuring broader accessibility. &nbsp;</li><li>Data analysis: AI algorithms offer the capability to sift through vast datasets, uncovering valuable insights into voter trends, preferences, and potential irregularities.  &nbsp;</li></ul><p> Technological risks associated with AI include: &nbsp;</p><ul><li>Security vulnerabilities: AI systems, datasets, and models are not immune to cyberattacks.  &nbsp;</li><li>Bias and Equity Concerns: AI systems have the potential to inherit biases from their training data, potentially leading to unfair or discriminatory outcomes in voter registration, candidate selection, or data analysis processes. &nbsp;</li><li>AI-driven cyberattacks: AI-powered data mining allows for targeted and sophisticated social engineering attacks, enabling threat actors to identify potential targets and vulnerabilities more effectively.  &nbsp;</li><li>Manipulation of AI-generated Content: Synthetic media, such as AI-generated images, videos, and text, can be weaponized to spread disinformation or manipulate public opinion.  &nbsp;</li></ul>

<p>AI has become so widespread and accessible, that it is certainly a power that must be kept in the rightful hands and with a watchful eye.   &nbsp;</p><h3><strong>Our Commitment</strong> &nbsp;</h3><p>Our commitment to the ethical use of technology and our mission of powering digital freedom has led us to sign <a href="https://www.aielectionsaccord.com/">the tech accord</a> "AI for Good." By aligning ourselves with this initiative, we emphasize our dedication to leveraging AI for positive impact and ethical practices. We recognize the transformative potential of AI in addressing societal challenges, including combating scams and safeguarding online communities.  &nbsp;</p><p>We’ve already started using AI for good, with products like Norton Genie – an AI-powered tool used to detect scams via text, email and social media. We’ll continue to learn and leverage the power and potential of AI responsibly to promote a safer and more inclusive digital environment for all.&nbsp;</p>

During a Worldwide Election Year, Understand and Navigate the Power and Possibilities of AI  

Seeing Isn’t Believing – Tackling AI, Misinformation and Its Impact on an Election Year 

Security Evangelist at Gen

<p><strong>The new frontier of cyberthreats: how nation-state groups are targeting consumers</strong> &nbsp;</p><p>In recent cybersecurity trends, we've observed a troubling shift: sophisticated attacks once aimed solely at governments and enterprises are now targeting everyday consumers. Nation-state groups, traditionally known for espionage and cyber warfare, are not just targeting governments and large enterprises anymore; they're also setting their sights on everyday consumers like you, increasingly using scams to infiltrate personal devices. &nbsp;</p><p> &nbsp;</p><p><strong>The rise of nation state scams on consumers</strong> &nbsp;</p><p>Typically, we think of nation-state attacks as sophisticated, covert operations aimed at siphoning secrets from rival governments or multinational corporations. However, these powerful adversaries have begun exploiting the same advanced tactics to deploy scams against ordinary people. The distinction between advanced persistent threats (APTs) and consumer-targeting scams is blurring. These threats now coexist, leveraging sophisticated techniques to breach consumer defenses. &nbsp;</p><p> &nbsp;</p><p><strong>Advanced threats in your inbox</strong> &nbsp;</p><p>Imagine receiving an email that looks like a job offer from a reputable company. It's actually a sophisticated scam, utilizing methods that were once the hallmark of attacks against governments. These scams can bypass standard antivirus software, tricking you into compromising your personal security without even realizing it. And this is already happening.  &nbsp;</p><p>The Lazarus Group, also known as Hidden Cobra, is a notorious cybercriminal organization believed to be backed by North Korea. It has been active since at least 2009 and is known for its highly sophisticated and destructive cyberattacks, primarily aimed at espionage, sabotage, and financial gain. The group has been linked to a variety of high-profile incidents globally, indicating the scale and global reach of its operations. &nbsp;</p><p>We recently uncovered (<a href="https://decoded.avast.io/luiginocamastra/from-byovd-to-a-0-day-unveiling-advanced-exploits-in-cyber-recruiting-scams/">read here our detailed technical analysis of the attack</a>) an attack carried out by Lazarus targeting specific individuals. The victims are unlike previous attacks from this group, such as the Sony Pictures Hack in 2014 or the Bangladesh Bank heist in 2016. &nbsp;</p>

<p><strong>Tomorrow's threats, today's concerns</strong> &nbsp;</p><p>It's a sobering thought: the elite cyber threats of today are the consumer scams of tomorrow. Techniques developed for espionage are trickling down to the consumer level, bringing with them risks that were once thought to be faced only by the most secure facilities in the world. &nbsp;</p><p>The cybersecurity landscape is continually evolving. What was once an isolated incident of advanced malware in a corporate system can now turn into widespread consumer scams. These threats evolve, learning from each interaction, which makes them increasingly difficult to detect and defend against. &nbsp;</p><p> &nbsp;</p><p><strong>Conclusion</strong> &nbsp;</p><p>Understanding this shift in target from the high towers of government to the personal devices in our pockets is crucial. As consumers, staying informed about the latest threats and adopting robust cybersecurity measures are our best defense. Remember, in the digital age, anyone can be a target. Invest in comprehensive security solutions that keep pace with these evolving threats. Regularly update your software, be skeptical of unsolicited communications, and consider consulting with cybersecurity experts to ensure your digital life is secure. &nbsp;</p>

The Evolution of Cyberthreats From Global Espionage to Personal Intrusion

The new frontier of cyberthreats: how nation-state groups are targeting consumers  

<p>"Scamverse." This concept, much like the multifaceted realms of the "Spiderverse" in the world of comic books, represents the complex and interconnected web of scams that dominate today's digital threats. As a cybersecurity expert with 25 years of experience, I have witnessed the evolution of these threats, from the early days of viruses and Trojans to the sophisticated scam-centric dangers we face today.&nbsp;</p><h2><strong>The Evolution of Cyberthreats</strong>&nbsp;</h2><p>Historically, the digital world was plagued primarily by viruses and Trojans. These were malicious programs designed to disrupt, damage, or gain unauthorized access to computer systems. With the popularization of the internet, a new breed of threats emerged, notably worms. These self-replicating programs could spread across networks without human intervention, marking a significant shift in the nature of cyberthreats.&nbsp;</p><p>However, as technology advanced and the internet became increasingly integral to daily life, cybercriminals adapted and evolved. The emergence of phishing scams, botnets, and ransomware signaled a shift from mere disruption to focused, profit-driven criminal activity. Phishing scams, in particular, demonstrated the opportunity to deceive or trick individuals into divulging sensitive information. We call it social engineering.&nbsp;</p><h2><strong>The Rise of the Scamverse</strong>&nbsp;</h2><p>The term "Scamverse" describes the current era, where the majority of cyberthreats involve some form of scam. This doesn't imply that all threats originate as scams, but it highlights the reality that most people are more likely to encounter a scam than any other type of cyberthreat. Scams in the digital age are diverse and sophisticated, ranging from email phishing and fake websites to social media scams and fraudulent online marketplaces.&nbsp;</p><p>In this scam-centric landscape, the primary weapon of cybercriminals is deception. Unlike traditional malware, which relies on exploiting technical vulnerabilities, scams exploit human vulnerabilities — trust, ignorance and fear. This makes them particularly insidious and difficult to combat, as they hinge on manipulating human psychology rather than breaching digital defenses.&nbsp;</p><h3><strong>Characteristics of the Scamverse</strong>&nbsp;</h3><ol><li><strong>Social Engineering:</strong> The cornerstone of most scams is social engineering, the art of manipulating people into performing actions or divulging confidential information. Phishing emails, for instance, often masquerade as legitimate communications from trusted entities to trick individuals into clicking on malicious links or sharing sensitive data.&nbsp;</li><li><strong>Financial Motivation:</strong> The primary objective of scams is financial gain. Whether through ransomware demands, the theft of financial information or fraudulent transactions, the end goal is invariably monetary.&nbsp;</li><li><strong>Targeted Attacks:</strong> Scams are increasingly personalized and targeted. Cybercriminals often gather information about their victims to craft more convincing and effective scams, increasing the likelihood of success.&nbsp;</li><li><strong>Exploitation of Current Events:</strong> Scammers are adept at exploiting current events, such as global pandemics or political upheavals, to create timely and relevant scam campaigns that prey on people's fears and uncertainties.&nbsp;</li></ol><h3><strong>Navigating the Scamverse</strong>&nbsp;</h3><p>Staying protected in the Scamverse requires vigilance and education. Traditional cybersecurity measures like antivirus software and firewalls remain essential, but they must be supplemented with awareness and skepticism. People should educate themselves about common scam tactics and question the legitimacy of unsolicited communications. Organizations should invest in regular training to keep employees informed about the latest scam techniques.&nbsp;</p><p>Additionally, solutions like email filtering, web reputation services and behavioral analytics can help identify and block scam-related activities. Collaborative efforts between cybersecurity firms, law enforcement and regulatory bodies are also crucial in dismantling large-scale scam operations.&nbsp;</p><h2><strong>The Dual Role of AI in the Scamverse</strong>&nbsp;</h2><p>Artificial Intelligence (AI) plays a paradoxical role in the Scamverse, acting as both a facilitator for cybercriminals and a powerful tool in the cybersecurity arsenal. This dual nature of AI in the realm of cyber threats underscores the ongoing arms race between attackers and defenders.&nbsp;</p><h3><strong>AI as a Tool for Cybercriminals</strong>&nbsp;</h3><p lang="EN-US">AI, as a tool for cybercriminals, significantly enhances the sophistication, reach, and effectiveness of scams. By leveraging natural language processing and machine learning, AI can craft highly convincing phishing emails and even use deepfake techniques in video and audio, making these scams increasingly challenging to distinguish from legitimate communications. Furthermore, AI facilitates automated social engineering, enabling bots to conduct personalized and persuasive interactions with potential victims on social media or via email. Additionally, AI algorithms are adept at harvesting and analyzing vast amounts of data to identify potential targets, tailoring scams to individuals' online behavior and striking at the most opportune moments, thereby increasing the success rate of these malicious attacks.&nbsp;</p><ol><li>As a tool for cybercriminals, AI significantly enhances the sophistication, reach and effectiveness of scams. By leveraging natural language processing and machine learning, AI can craft highly convincing phishing emails and even use deepfake techniques in video and audio, making these scams increasingly challenging to distinguish from legitimate communications. Furthermore, AI facilitates automated social engineering, enabling bots to conduct personalized and persuasive interactions with potential victims on social media or via email. Additionally, AI algorithms are adept at harvesting and analyzing vast amounts of data to identify potential targets, tailoring scams to individuals' online behavior and striking at the most opportune moments, thereby increasing the success rate of these malicious attacks.&nbsp;</li></ol><h3><strong>AI as a Defense Mechanism</strong>&nbsp;</h3><p>Conversely, AI is a formidable tool in combating the Scamverse, offering several advantages in detecting and preventing scams.&nbsp;</p><ol><li><strong>Continuous Adaptation:</strong> Perhaps the most significant advantage of AI in cybersecurity is its ability to continuously learn and adapt. For example, with <a href="https://us.norton.com/products/genie-scam-detector">Norton Genie</a>, as new types of scams emerge, the AI can be trained with the latest data points to recognize them. It analyzes messages, websites, social media posts and more, alerting you if it’s a potential scam and then giving you advice on the best next steps. &nbsp;</li><li><p lang="EN-US"><strong>Anomaly Detection:</strong> AI systems can analyze patterns in data to identify anomalies that may indicate scam activities. These systems can detect unusual patterns in network traffic, email communications or online transactions that human analysts might miss.&nbsp;</p></li><li><strong>Phishing Detection:</strong> AI can be trained to recognize the subtle signs of phishing attempts, such as slight deviations in email formatting, sender information or the language used. This can help in filtering out phishing emails before they reach the intended recipient.&nbsp;</li><li><strong>Behavioral Analysis:</strong> AI can monitor user behavior to detect signs of compromise or scam interactions. For example, sudden changes in the way a user interacts with a system or unusual financial transactions can trigger alerts.&nbsp;</li></ol><h2><strong>The Future Intersection of AI and Scamverse</strong>&nbsp;</h2><p>Looking forward, the intersection of AI and the Scamverse is poised to become increasingly complex. As AI technologies become more advanced, we can expect both the sophistication of scams and the effectiveness of our defenses to escalate. This dynamic landscape will require constant vigilance, innovation and collaboration, among cybersecurity professionals, technology developers and policymakers.&nbsp;</p><p><a href="https://www.gendigital.com/blog/news/innovation/ai-based-cyberthreats">AI's role</a> in the Scamverse is a double-edged sword. While it empowers cybercriminals with advanced tools to execute scams, it also equips cybersecurity experts with potent mechanisms to thwart these threats. The future of cybersecurity in the Scamverse will undoubtedly be shaped by the ongoing development and deployment of AI technologies, emphasizing the need for cutting-edge research and ethical AI practices in the field.&nbsp;</p><p><strong>Conclusion</strong>&nbsp;</p><p>The Scamverse represents the current and perhaps most challenging era in the evolution of cyberthreats. Its reliance on social engineering makes it uniquely dangerous, as it exploits human nature itself. Navigating this landscape requires a combination of technological solutions, education, and a healthy dose of skepticism. As we continue to adapt to these challenges, one thing is clear: the battle against the Scamverse will be as much about changing human behavior as it is about advancing technological defenses.&nbsp;</p>

In the ever-evolving landscape of cyberthreats, a new term has emerged to encapsulate the current era's predominant danger: "Scamverse."

The Scamverse: Navigating the New Frontiers of Cyberthreats

Global Privacy Compliance Program Manager

<h2><strong>What is Data Privacy Week?</strong> &nbsp;</h2><p>Data Protection Day originated in Europe to commemorate the first legally binding international treaty dealing with privacy and data protection. Now, the celebration has expanded to an entire week and is recognized worldwide. The mission of <a href="https://staysafeonline.org/programs/data-privacy-week/">Data Privacy Week</a>, observed January 21-27 this year, is to <em>inspire dialogue and empower individuals and companies to respect privacy, safeguard data and enable trust</em>.&nbsp;&nbsp;</p><p>Data Privacy Week, which encourages people everywhere to take control of their digital footprints, is run by the <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fstaysafeonline.org%2Fprograms%2Fdata-privacy-week%2F&amp;data=05%7C02%7CAlisha.Robinson%40gendigital.com%7C6a003a179aef40725ccf08dc16b91ab6%7C94986b1d466f4fc0ab4b5c725603deab%7C0%7C0%7C638410231503836756%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=E3%2BMt372PJpwhWRw5v6FwZ1nCsxBCaH2fv6H1u0BOu4%3D&amp;reserved=0%22%20\o%20%22Original%20URL:%20https://staysafeonline.org/programs/data-privacy-week/%20%20Click%20to%20follow%20link.%22%20\t%20%22_blank">National Cybersecurity Alliance</a> (NCA). NCA advocates for the safe use of technology and helps governments and corporations work together to foster digital good.&nbsp;</p><p>Everything you do online generates data. Every time you shop, click, scroll, like, message, play and more, you are generating data. This personal information has tremendous value to businesses. The landscape of privacy and data protection laws and regulations continues to grow more complex. Companies with global operations that wish to advance the privacy rights of individuals and enable innovative products and services must comply with these laws and deliver meaningful data security to their customers; this can be challenging for many companies and difficult for people when trying to figure out if the apps and companies that hold their data are keeping it safe.  &nbsp;</p>

<h2><strong>How We Help People Protect Their Digital Lives</strong> &nbsp;</h2><p>For Gen, empowering people to take control of their digital lives is in our DNA. Security, transparency, and accountability are built into everything we do, and products like <a href="https://us.norton.com/products/norton-secure-vpn%22%20/t%20%22_blank">Norton Secure VPN</a> protect a person’s online privacy by hiding the computer’s address from websites visited from any device. Norton, a part of Gen, also offers <a href="https://us.norton.com/products/norton-360-deluxe%22%20/t%20%22_blank">Norton 360 Deluxe</a>, which can prevent activity or location tracking, as well as information theft, installation of malicious programs and uninvited changes to devices. We recently <a href="https://www.gendigital.com/blog/impact/community/product-donations-domestic-violence">launched a product donation pilot program</a>, donating up to 5,000 of these free product licenses to survivors of domestic violence to help them recover from financial or technological abuse. These products are also donated or discounted to nonprofits through our partnership with <a href="https://www.techsoup.org/search/products/norton/%22%20/t%20%22_blank">TechSoup</a>. &nbsp;</p><p>In addition to product donations, we work regularly with nonprofits like <a href="https://www.gendigital.com/blog/impact/community/my-digital-life%22%20/t%20%22_blank">Discovery Education</a> and the <a href="https://www.gendigital.com/blog/impact/community/the-smart-talk-2023%22%20/t%20%22_blank">National PTA</a> to help children and families learn about keeping their information private.  &nbsp;</p><h2><strong>Five Ways We Help Keep Customer Data Safe</strong>&nbsp;</h2><p>We focus on five essential elements to help keep customer data safe. Check for these key practices: &nbsp;</p><ol><li><strong>Accountability.</strong> At Gen, we hold ourselves accountable by defining our principles, conducting internal and external audits, empowering employees at all levels of the company to proactively consider privacy and data protection, engaging in continuous improvement processes, and constantly scanning for new risks and opportunities. For more details on Gen’s Privacy Operating Model, see page 34 of our <a href="https://s201.q4cdn.com/771113172/files/doc_downloads/2023/07/gen-2023-social-impact-report.pdf">2023 ESG Report</a>. &nbsp;</li><li><strong>Security.</strong> We secure personal data using appropriate technical and organizational measures to protect integrity, confidentiality, and availability. Our security monitoring alerts us to suspicious activity, and we have a robust incident response program. &nbsp;</li><li><strong>Essential rights. </strong>We take a principles-based approach, going beyond regional data protection laws to provide essential rights to our customers, such as access and deletion, regardless of whether there is a law requiring it. &nbsp;</li><li><strong>Transparency.</strong> Privacy policies are often difficult to read and understand. We work to make our policies as clear and detailed as possible. We provide additional support articles and easy access to contact information to make it easy for customers to exercise their privacy rights and get their questions answered. &nbsp;</li><li><strong>Customer-First Privacy by Design. </strong>In everything we do, we strive to anticipate, identify, and prevent invasive events before they happen. Privacy measures should not be add-ons, but fully integrated components of the system. We only collect personal data for specified, clear and legitimate purposes. And, we only collect as much personal data as we need to achieve those purposes.&nbsp;&nbsp;</li></ol><p>This Data Privacy Week, we encourage you to do a quick review of the companies and apps that have your information. Do they have systems and policies in place to keep your data secure? Will they let you delete your data? Are they explaining what personal data is collected and why? Do they respect your rights to control how your data is used? Remember, it’s your data and it has value. Be selective about who you choose to do business with and thoughtful about what information you are providing. And, no matter where you are in your data security journey, we hope Data Privacy Week serves as an important reminder to exercise your rights to safety and privacy.  </p>

This Data Privacy Week, learn what to expect from businesses that have your personal information

Helping to Keep Personal Data Safe

<p>Join us at the end of October for a conference about new advances in machine learning. You will see how AI can help protect people against the bad guys on the Internet – a goal we trully believe in. We have teamed up with Czech Technical University to bring together the best minds in tech and academia. Experts from many universities world wide as well as a few of our own will share their vision for what the future holds and debate the possibilities of tomorrow’s digital landscape.</p><h2><strong>Speakers’s spotlight:</strong></h2><ul><li>Doug Tygar – UC Berkeley</li><li>Alex Halderman – University of Michigan</li><li>Matthias Grossglauser – EPFL Switzerland</li><li>Rachel Greenstadt – New York University</li><li>Christopher Kiekintveld – University of Texas</li></ul><p>You’ll have a chance to meet our new CTO Michal Pechoucek. He is a seasoned security specialist and a father of AI at CTU. Michal will give the opening talk.</p><h2><strong>Call for posters</strong></h2><p>If you’re a PhD student there is also a poster session where you’ve be able to present your research and achievements. The deadline is August 18th 2019.</p><h2><strong>More Info</strong></h2><ul><li>When: October 25th 2019</li><li>Where: Prague, Czech Republic</li><li>Details: <a href="https://www.cybersecprague.ai/">https://www.cybersecprague.ai/</a></li></ul>

CyberSec & AI Prague 2019

Speakers’s spotlight:

Call for posters

More Info