Deepfake Cyber Attacks: A Rising Threat in Eastern Europe

Introduction

In recent years, Advanced Persistent Threat (APT) groups have been increasingly leveraging deepfake technology to execute sophisticated cyber attacks in Eastern Europe. These attacks utilize AI-generated media—such as videos, audio, and images—to deceive individuals and organizations, leading to significant security breaches and financial losses.

Deepfake Technology in Cyber Attacks

Deepfakes are synthetic media created using artificial intelligence, enabling the generation of hyper-realistic videos and audio that mimic real individuals. In the context of cyber attacks, APT groups employ deepfakes for various malicious activities, including:

• Social Engineering: Crafting convincing communications that impersonate trusted figures to manipulate targets into divulging sensitive information or performing unauthorized actions.

• Synthetic Identity Operations: Creating false identities to gain unauthorized access to systems or networks, often for espionage or data theft.

• AI-Generated Phishing Media: Developing realistic phishing emails, videos, or audio messages to deceive recipients into clicking malicious links or providing confidential information.

• Business Email Compromise (BEC) via Deepfake Voice Calls: Utilizing AI-generated voice clones to impersonate executives or trusted contacts, instructing employees to perform fraudulent transactions or disclose sensitive data.

Notable Incidents in Eastern Europe

Several incidents in Eastern Europe highlight the growing threat of deepfake cyber attacks:

• Kimsuky APT Group's Deepfake Military ID Fraud: In July 2025, the Kimsuky APT group, attributed to North Korea, employed generative AI tools like ChatGPT to create deepfake images of South Korean military ID cards. These images were used in spear-phishing attacks targeting defense-related institutions, aiming to gain unauthorized access to sensitive information. (genians.co.kr)

• Chollima APT Group's AI-Driven Infiltration: In November 2025, the Chollima APT group, also linked to North Korea, utilized real-time AI facial filters during video interviews to impersonate qualified job candidates. This tactic was employed to infiltrate cryptocurrency and Web3 companies, highlighting the group's innovative use of deepfake technology for corporate espionage. (socradar.io)

Implications and Risks

The integration of deepfake technology into cyber attack strategies by APT groups presents several critical challenges:

• Erosion of Trust: Deepfakes can undermine trust in digital communications, as individuals may become skeptical of the authenticity of messages, even from known contacts.

• Detection Difficulties: Traditional security measures often struggle to identify deepfake content, making it challenging to detect and prevent such attacks.

• Financial Losses: Successful deepfake attacks can lead to significant financial losses, as seen in various incidents where organizations were defrauded through AI-generated communications.

Mitigation Strategies

To defend against deepfake cyber attacks, organizations should consider the following measures:

• Enhanced Verification Processes: Implement multi-factor authentication and verify requests for sensitive actions through alternative communication channels.

• Employee Training: Educate staff on the risks associated with deepfakes and provide training on recognizing suspicious communications.

• Advanced Detection Tools: Invest in AI-driven tools capable of detecting deepfake content and anomalous behaviors.

• Collaboration with Authorities: Work closely with cybersecurity agencies and industry groups to stay informed about emerging threats and share intelligence.

Conclusion

The use of deepfake technology by APT groups in Eastern Europe represents a significant escalation in cyber threats. Organizations must adopt comprehensive strategies to mitigate these risks, combining technological solutions with proactive training and awareness programs to safeguard against this evolving threat landscape.

Highlights:

• Deepfake worries hit a new high as one in four Americans say they have received a deepfake voice call in the past 12 months - experts blame 'the weaponization of AI', Published on Saturday, March 14
• AI impersonation scams are sky-rocketing in 2025, security experts warn - here's how to stay safe, Published on Sunday, August 31
• Militant groups are experimenting with AI, and the risks are expected to grow, Published on Sunday, December 14