2026-06-26

SECURITY HINTS & TIPS:

AI-POWERED SCAMS

As we integrate more AI into our daily workflows, it is vital to stay alert to the evolving tactics used by bad actors. AI is being weaponized by bad actors to create highly convincing scams through deepfakes and voice cloning.

Deepfakes
Deepfakes are AI-generated media that digitally mimic real people to deceive and steal information.

AI Voice Phishing
AI voice phishing (vishing) uses clones of familiar voices to lower your guard and solicit passwords or funds.

How to Fight Back

Scam Type Red Flag Action to Take
Deepfake Video/Audio Unusual request for money or data Follow official policy and verify in person if possible.
Voice Cloning Urgent, threatening, or too-good-to-be-true offers. Hang up and call the person back using a trusted number.
Tech Support Vishing Asking for a password or confidential information. Never share passwords over the phone, especially on random calls.

Pro Tip: If you suspect a “familiar” voice on the phone might be a clone, ask them a question that only the real person would know the answer to.

Using AI Responsibly at Work
Ensure you use AI safely by following these direct guidelines:

  • Protect Data: Never input confidential, personal, or strategic business information into public AI tools.
  • Fact Check: AI can hallucinate. Always independently verify the info it gives you.
  • Stay Compliant: Use only approved AI tools sanctioned by the organization.

ISMS References
05.4 AI Policy
5.5.4 Approved AI Tools List

Manitoulin Group of Companies Security Team
Cybersecurity@manitoulingroup.com

Stop, Look, and Think. Don’t be fooled.