Deepfake Cyber Attacks: A Rising Threat in Western Europe

In early 2026, Advanced Persistent Threat (APT) groups have escalated their use of deepfake technologies to conduct sophisticated cyber attacks across Western Europe. These attacks encompass deepfake video and audio social engineering, synthetic identity operations, AI-generated phishing media, and Business Email Compromise (BEC) fraud via deepfake voice calls.

Deepfake Video and Audio Social Engineering

APT groups are employing deepfake videos and audio to impersonate executives and trusted individuals, thereby manipulating employees into divulging sensitive information or authorizing unauthorized transactions. For instance, the Kimsuky APT group utilized generative AI to create deepfake images of South Korean military ID cards, facilitating spear-phishing attacks that led to unauthorized access to military-related information. (genians.co.kr)

Synthetic Identity Operations

The creation of synthetic identities through deepfake technologies has enabled APT groups to infiltrate organizations by presenting fabricated credentials. This tactic is particularly prevalent in sectors such as cryptocurrency and Web3, where the Chollima APT group has been reported to use AI filters to create convincing synthetic identities, thereby gaining unauthorized access to sensitive systems. (socradar.io)

AI-Generated Phishing Media

The integration of AI in phishing campaigns has led to the development of highly convincing phishing media. A 2026 report from Kaseya highlighted that 83% of phishing emails now incorporate AI-generated content, with 40% of BEC attacks utilizing generative AI. These AI-driven phishing emails boast a 54% click rate, significantly higher than the 12% observed in traditional phishing messages. (itpro.com)

BEC Fraud via Deepfake Voice Calls

Deepfake voice technology has been weaponized to execute BEC fraud through convincing voice calls. Scammers clone the voices of executives or trusted contacts to instruct employees to perform unauthorized actions, such as transferring funds. A 2026 survey revealed that one in four Americans received a deepfake voice call in the past year, underscoring the widespread nature of this threat. (techradar.com)

Conclusion

The utilization of deepfake technologies by APT groups represents a significant escalation in cyber attack sophistication. Organizations in Western Europe must enhance their cybersecurity measures by integrating AI-driven defense platforms, conducting regular security awareness training, and implementing robust verification protocols to mitigate the risks associated with these advanced threats.

Highlights:

• Deepfake worries hit a new high as one in four Americans say they have received a deepfake voice call in the past 12 months - experts blame 'the weaponization of AI', Published on Saturday, March 14
• 'AI-generated phishing became the baseline' for hackers last year - Kaseya warns it's going to get worse in 2026, Published on Thursday, March 19