Deepfake Cyber Attacks in South Asia: Emerging Threats and Nation-State Actors

Introduction

As of March 2026, South Asia is witnessing a significant rise in cyber attacks utilizing deepfake technology. Nation-state actors are increasingly deploying AI-generated media—such as videos and audio—to conduct sophisticated social engineering, synthetic identity operations, and Business Email Compromise (BEC) fraud. This briefing examines the current threat landscape, identifies key actors, and provides recommendations for mitigation.

Current Threat Landscape

Deepfake technology has evolved rapidly, enabling the creation of highly convincing synthetic media. In South Asia, this advancement has been exploited by cyber adversaries to enhance the effectiveness of their operations.

Social Engineering Attacks

Adversaries are leveraging deepfake videos and audio to impersonate executives and trusted partners, deceiving employees into transferring funds or divulging sensitive information. For instance, a notable incident involved a $25 million scam against a Hong Kong office, where attackers used AI-generated voice and video to impersonate company executives. (itpro.com)

Synthetic Identity Operations

The commodification of deepfake technology has led to the emergence of "deepfake-fraud-as-a-service" platforms. These services offer ready-to-use synthetic identities, facilitating large-scale identity fraud operations. Such services have been linked to increased incidents of AI-driven identity fraud in Southeast Asia, with Indonesia and Vietnam at the epicenter. (ozforensics.com)

BEC Fraud via Deepfake Voice Calls

Business Email Compromise (BEC) schemes have evolved to include deepfake voice calls. Attackers use AI-generated voice to impersonate company executives, instructing employees to transfer funds or provide confidential information. This method has been reported in various incidents, highlighting the growing sophistication of BEC attacks. (itpro.com)

Nation-State Actors Involved

While specific attribution remains challenging, the sophistication and scale of these attacks suggest involvement of nation-state actors with advanced cyber capabilities. The rise in AI-driven cyber threats aligns with activities observed from state-sponsored groups in the region. (securitybrief.asia)

Mitigation Recommendations

To address the escalating threat of deepfake cyber attacks, organizations in South Asia should consider the following measures:

• Employee Training: Regularly educate staff on the risks associated with deepfake technology and the importance of verifying requests through multiple channels.

• Multi-Factor Authentication (MFA): Implement MFA for sensitive transactions to add an additional layer of security against unauthorized access.

• AI-Driven Detection Tools: Deploy advanced AI-based tools capable of detecting deepfake content to identify and mitigate fraudulent activities.

• Limit Public Exposure: Restrict the availability of executive audio and video content online to reduce the risk of impersonation.

Conclusion

The integration of deepfake technology into cyber attack strategies represents a significant challenge for organizations in South Asia. By understanding the evolving tactics of nation-state actors and implementing comprehensive mitigation strategies, organizations can enhance their resilience against these sophisticated threats.

Highlights:

• Deepfake business risks are growing - here's what leaders need to know, Published on Friday, February 13
• CRINK attacks: which nation state hackers will be the biggest threat in 2026?, Published on Monday, December 22