Deepfake Cyber Attacks in Southeast Asia: Emerging Threats and Mitigation Strategies

Introduction

In early 2026, Advanced Persistent Threat (APT) groups in Southeast Asia have been observed leveraging deepfake technology to enhance their cyber attack capabilities. This trend encompasses the use of AI-generated videos and audio for social engineering, synthetic identity operations, AI-driven phishing media, and Business Email Compromise (BEC) fraud via deepfake voice calls.

Deepfake Technology in Cyber Attacks

Deepfake technology employs artificial intelligence to create hyper-realistic audio and video content, enabling cybercriminals to impersonate individuals convincingly. This capability has been increasingly weaponized by APT groups to execute sophisticated attacks.

Social Engineering and Synthetic Identity Operations

APT groups have utilized deepfake videos to impersonate public figures, thereby lending credibility to fraudulent schemes. For instance, in late 2023, deepfake videos of Singapore's Prime Minister Lee Hsien Loong and Deputy Prime Minister Lawrence Wong were circulated to promote a cryptocurrency investment, deceiving viewers who trusted the source. (ozforensics.com)

Additionally, cybercriminals have employed deepfake technology to create synthetic identities, facilitating various fraudulent activities. In Hong Kong, a multinational firm's local branch was defrauded of HK$200 million (US$25.6 million) after staff were deceived by a deepfake video conference. Scammers created realistic video avatars of the company's CFO and other executives, leading employees to authorize substantial fund transfers. (ozforensics.com)

AI-Generated Phishing Media

The integration of AI in phishing attacks has become prevalent, with 83% of phishing emails incorporating AI-generated content. These emails exhibit improved grammar, personalization, and timely content, resulting in a 54% click rate compared to 12% for traditional phishing messages. (itpro.com)

Furthermore, AI-driven phishing campaigns have been reported to evade traditional detection methods, making them more challenging to identify and mitigate. (itpro.com)

BEC Fraud via Deepfake Voice Calls

Deepfake voice technology has been exploited in Business Email Compromise (BEC) attacks, where cybercriminals use AI-generated voice clones to impersonate executives and request fraudulent transactions. In 2024, a notable incident involved scammers posing as the CFO of a UK-based engineering company, Arup, and tricking employees into authorizing transfers totaling $25 million. (cybersecop.com)

Mitigation Strategies

To counteract these evolving threats, organizations should implement the following measures:

• Employee Training: Educate staff on recognizing deepfake content and the risks associated with AI-driven attacks.

• Multi-Factor Authentication (MFA): Enforce MFA to add an additional layer of security against unauthorized access.

• Verification Protocols: Establish clear and verified communication channels for financial transactions and sensitive information requests.

• Advanced Detection Tools: Deploy AI-based solutions capable of identifying deepfake content and AI-generated phishing attempts.

Conclusion

The utilization of deepfake technology by APT groups in Southeast Asia represents a significant escalation in cyber attack sophistication. By understanding these tactics and implementing robust mitigation strategies, organizations can enhance their defenses against such advanced threats.

Highlights:

• AI impersonation scams are sky-rocketing in 2025, security experts warn - here's how to stay safe, Published on Sunday, August 31
• 'AI-generated phishing became the baseline' for hackers last year - Kaseya warns it's going to get worse in 2026, Published on Thursday, March 19