Hacktivist Deepfake Cyber Attacks in South Asia: Emerging Threats and Mitigation Strategies

Introduction

In recent years, hacktivist groups in South Asia have been increasingly leveraging deepfake technologies to execute cyber attacks. These attacks, which involve the creation of synthetic media such as videos and audio to impersonate individuals, have led to significant financial losses and reputational damage. This briefing examines recent incidents, the tools employed, and recommended mitigation strategies.

Recent Incidents

In September 2025, a North Korea-linked hacking group, Kimsuky, utilized AI-generated deepfake images to target South Korean defense-related organizations. The attackers crafted fabricated military identification cards using ChatGPT, enhancing the credibility of their phishing attempts. (straitstimes.com)

Similarly, in March 2026, Indian firms heightened their cyber defenses in response to rising deepfake threats, particularly amid geopolitical tensions in the Middle East. The National Association of Software and Service Companies (NASSCOM) issued advisories urging member companies to remain vigilant against AI-driven threats, including deepfakes and identity attacks. (newindianexpress.com)

Tools and Techniques Employed

Hacktivist groups are employing advanced AI tools to create convincing deepfakes. These tools utilize generative adversarial networks (GANs) and large language models to produce realistic audio and video content. For instance, Kimsuky used ChatGPT to generate fake military IDs, demonstrating the accessibility and effectiveness of AI in crafting deceptive materials. (straitstimes.com)

The use of AI-generated voice cloning has also been reported, with attackers replicating the voices of trusted individuals to execute fraudulent transactions. A 2026 survey revealed that one in four Americans received a deepfake voice call in the past year, highlighting the widespread nature of this threat. (techradar.com)

Impact on South Asia

The proliferation of deepfake cyber attacks in South Asia has led to significant financial losses and erosion of trust. In India, incidents of AI-generated deepfakes have resulted in scams amounting to millions of dollars, affecting both individuals and organizations. (oecd.ai)

Mitigation Strategies

To combat the rising threat of deepfake cyber attacks, organizations should consider the following strategies:

• Enhanced Awareness and Training: Educate employees and stakeholders about the risks associated with deepfakes and the importance of verifying information through multiple channels.

• Advanced Detection Tools: Implement AI-driven solutions capable of detecting deepfake content, such as voice and video anomalies, to identify fraudulent communications.

• Multi-Factor Authentication (MFA): Strengthen authentication processes to prevent unauthorized access, especially in financial transactions.

• Collaboration and Information Sharing: Engage in cross-border intelligence sharing to stay informed about emerging threats and effective countermeasures.

Conclusion

The use of deepfake technologies by hacktivist groups in South Asia represents a significant and evolving cyber threat. By understanding the tactics employed and implementing comprehensive mitigation strategies, organizations can better protect themselves against these sophisticated attacks.