Cyber attack believed to have originated in Hong Kong

Arup has confirmed that it was the victim of a deepfake fraud after an employee was duped into sending HK$200m (拢20m) to criminals by an artificial intelligence-generated video call.

Arup said that at the beginning of the year it had 鈥渘otified the police about an incident of fraud in Hong Kong鈥. It confirmed that fake voices and images were used.

Hong Kong police said in February a worker at a then-unnamed company had been tricked into transferring money by people on a hoax call 鈥減osing as senior officers of the company鈥.

cyber

Source: Shutterstock

The scam involved using fake voices and images. Arup said the frequency and sophistication of deepfake and cyber-attacks was on the rise

In its statement, Arup added: 鈥淏ack in January we notified the police about an incident of fraud in Hong Kong. Unfortunately, we can鈥檛 go into details at this stage as the incident is still the subject of an ongoing investigation.

鈥淥ur financial stability and business operations were not affected and none of our internal systems were compromised.鈥

Arup global chief information officer, Rob Greig, who oversees the company鈥檚 computer systems, said the organisation has been subject to attacks before with their frequency and capability rising in the past few months.

鈥淟ike many other businesses around the globe, our operations are subject to regular attacks, including invoice fraud, phishing scams, WhatsApp voice spoofing and deepfakes. What we have seen is that the number and sophistication of these attacks has been rising sharply in recent months,鈥 he said.

Greig said he hoped that Arup鈥檚 experience would 鈥渞aise awareness鈥 of the increasing sophistication of cyber attackers. He added: 鈥淭his is an industry, business, and social issue, and I hope our experience can help raise awareness of the increasing sophistication and evolving techniques of bad actors.鈥 

The Hong Kong police force said an employee had been 鈥渄eceived of some HK$200m after [they] received video conference calls from someone posing as senior officers of the company requesting to transfer money to designated bank accounts鈥.

It said no arrests had been made so far but the investigation was ongoing.

Topics