Bottom line: Scammers are using AI-powered impersonation to target iPhone users, exploiting vulnerabilities in digital intelligence solutions.
What's happening: Cellebrite's AI tool is being used by scammers to impersonate Apple Support representatives, such as Alice. The scammers are targeting iPhone users in the United States and Canada. The attacks are believed to have started around February 2022, when the scammers began using the AI tool to gain access to iPhone users' personal data.
What to do: Security leaders should monitor their organization's Apple devices for suspicious activity and implement two-factor authentication to prevent unauthorized access. They should also ensure that their organization's digital intelligence solutions are up-to-date and patched against known vulnerabilities, such as the CVE-2021-43455 vulnerability.