{"id":4303,"date":"2026-07-20T15:34:35","date_gmt":"2026-07-20T15:34:35","guid":{"rendered":"https:\/\/blogs.chapman.edu\/information-systems\/?p=4303"},"modified":"2026-07-20T15:34:35","modified_gmt":"2026-07-20T15:34:35","slug":"when-the-scam-sounds-like-your-boss","status":"publish","type":"post","link":"https:\/\/blogs.chapman.edu\/information-systems\/2026\/07\/20\/when-the-scam-sounds-like-your-boss\/","title":{"rendered":"When the Scam Sounds Like Your Boss"},"content":{"rendered":"

A quick note from your CISO: the next phishing attempt may not look fake.\u00a0It may sound familiar!<\/span><\/p>\n

A few years ago, spotting a scam was usually a matter of catching the obvious signs: bad grammar, strange formatting, or the classic \u201cDear User\u201d greeting \u2014 the cybersecurity equivalent of a fake mustache. Today\u2019s version may reference a real project, use the right tone for your department, or include a voicemail that sounds exactly like someone you know. That last part is where things get<\/span>\u00a0<\/span><\/b>uncomfortably interesting.<\/span>\u00a0<\/span><\/p>\n

Wait;\u00a0They Can Clone Voices Now?<\/span><\/b>\u00a0<\/span><\/p>\n

Yes!\u00a0AI voice-cloning tools can now create a convincing version of\u00a0someone\u2019s\u00a0voice from a surprisingly small audio sample:\u00a0a public video, a podcast, a\u00a0conference recording, or a\u00a0short clip posted online. A call or voicemail may sound familiar without being legitimate, especially\u00a0when it\u00a0asks you to move\u00a0quickly,\u00a0share information, or do \u201cone small favor,\u201d which in\u00a0scam\u00a0language\u00a0is rarely small.<\/span>\u00a0<\/span><\/p>\n

Put another way:\u00a0\u201cIt sounded like them\u201d\u00a0is\u00a0useful\u00a0context.\u00a0Attackers\u00a0do not\u00a0need access to Chapman systems\u00a0to be convincing. A\u00a0little public information, a familiar name, and\u00a0a well-timed sense of\u00a0urgency\u00a0can do a lot of damage.\u00a0Cybercriminals\u00a0are persistent \u2014\u00a0basically the\u00a0raccoons of the internet.<\/span>\u00a0<\/span><\/p>\n

What Does This Look Like in the Real World?<\/span><\/b>\u00a0<\/span><\/p>\n

The most common version is vishing\u00a0or\u00a0voice phishing. In practice, that could be\u00a0a voicemail from\u00a0\u201cyour supervisor\u201d\u00a0asking for a quick favor, a call about payroll or vendor payments, or a follow-up to an email that already seemed believable. Add voice cloning, and the request\u00a0does not\u00a0just\u00a0feel\u00a0convincing;\u00a0it sounds familiar. That combination of urgency and familiarity is what makes these attacks\u00a0effective, especially on\u00a0a busy day\u00a0when everyone is trying to keep things moving. Attackers\u00a0are counting on our desire not to be difficult. Rude, but effective.<\/span>\u00a0<\/span><\/p>\n

Why This Works (Even If You Know About It)<\/span><\/b>\u00a0<\/span><\/p>\n

These\u00a0scams\u00a0work because the message lines up just enough: it sounds like someone you\u00a0trust,\u00a0it arrives at a busy moment, and the context feels close enough to be real. AI helps attackers research, personalize, and scale those interactions,\u00a0which means\u00a0more attempts\u00a0can\u00a0sound\u00a0believable and\u00a0land with\u00a0the right\u00a0person at the wrong time.\u00a0It is not\u00a0magic. It is automation with bad manners.<\/span>\u00a0<\/span><\/p>\n

The Microsoft Digital Defense Report 2024<\/span><\/a>\u00a0notes\u00a0that deepfakes and AI-enabled impersonation are being used to create convincing interactions, including real-time voice and video impersonation designed to build trust. The goal\u00a0is not\u00a0to fool everyone. It is\u00a0to catch one person at the wrong moment. If something sounds exactly like a colleague, your brain may not stop to run a\u00a0full\u00a0security review; it moves straight to\u00a0\u201chow do I help?\u201d\u00a0That instinct is good.\u00a0It is also what attackers are counting on.<\/span>\u00a0<\/span><\/p>\n

What You Should Do Differently (Practical Version)<\/span><\/b>\u00a0<\/span><\/p>\n