FBI Warning—You Should Never Reply To These Messages
Republished on July 10 with new report into AI deep fake attacks and advice for smartphone owners on staying safe as threats surge.
The news that AI is being used to impersonate Secretary of State Marco Rubio and place calls to foreign ministers may be shocking, but it shouldn't be surprising. The FBI has warned such attacks are now underway and it will only get worse.
As first reported by the Washington Post, the State Department has told U.S. diplomats that this latest attack has targeted at least three foreign ministers, a U.S. senator and a governor, using an AI generated voice to impersonate Rubio.
A fake Signal account (Signal strikes again) was used to initiate contact through text and voice messages. It's clear that voice messages enable attackers to deploy AI fakes without the inherent risk in attempting to run them in real-time on a live call.
The FBI is clear — do not respond to text or voice messages unless you can verify the sender. That means a voice message that sounds familiar cannot be trusted unless you can verify the actual number from which it has been sent. Do not reply until you can.
Darktrace's AI and Strategy director Margaret Cunningham told me this is all too 'easy.' The attacks, while 'ultimately unsuccessful,' demonstrate 'just how easily generative AI can be used to launch credible, targeted social engineering attacks.'
Alarmingly, Cunningham warns, 'this threat didn't fail because it was poorly crafted — it failed because it missed the right moment of human vulnerability.' People make decisions 'while multitasking, under pressure, and guided by what feels familiar. In those moments, a trusted voice or official-looking message can easily bypass caution.'
And while the Rubio scam will generate plenty of headlines, the AI fakes warning has being doing the rounds for some months. It won't make those same headlines, but you're more likely to be targeted in your professional life through social engineering that exploits readily available social media connections and content to trick you.
The FBI tells smartphone users: 'Before responding, research the originating number, organization, and/or person purporting to contact you. Then independently identify a phone number for the person and call to verify their authenticity.'
This is in addition to the broader advice given the plague of text message attacks now targeting American citizens. Check the details of any message. Delete any that are clear misrepresentations, such as fake tolls or DMV motoring offenses. Do not click any links contained in text messages — ever. And do not be afraid to hang up on the tech or customer support desk or bank or the law enforcement officer contacting you. You can then reach out to the relevant organization using publicly available contact details.
ESET's Jake Moore warns 'cloning a voice can now take just minutes and the results are highly convincing when combined with social engineering. As the technology improves, the amount of audio needed to create a realistic clone also continues to shrink.'
'This impersonation is alarming and highlights just how sophisticated generative AI tools have become,' says Black Duck's Thomas Richards. 'It underscores the risk of generative AI tools being used to manipulate and to conduct fraud. The old software world is gone, giving way to a new set of truths defined by AI.'
As for the Rubio fakes, 'the State Department is aware of this incident and is currently monitoring and addressing the matter,' a spokesperson told reporters. 'The department takes seriously its responsibility to safeguard its information and continuously take steps to improve the department's cybersecurity posture to prevent future incidents.'
'AI-generated content has advanced to the point that it is often difficult to identify,' the bureau warns. 'When in doubt about the authenticity of someone wishing to communicate with you, contact your relevant security officials or the FBI for help.'
With perfect timing, Trend Micro's latest report warns 'criminals can easily generate highly convincing deepfakes with very little budget, effort, and expertise, and deepfake generation tools will only become more affordable and more effective in the future.'
The security team says this is being enabled by the same kinds of toolkits driving other types of frauds that have also triggered FBI warnings this year — including a variety of other message attacks. 'tools for creating deepfakes,' Trend Micro says, 'are now more powerful and more accessible by being cheaper and easier to use.'
As warned by the FBI earlier in the year and with the latest Rubio impersonations that it has under investigation, deep fake voice technology is now easily deployed.
'The market for AI-generated voice technology is extremely mature,' Trend Micro says, citing several commercial applications, 'with numerous services offering voice cloning and studio-grade voiceovers… While 'these services have many legitimate applications, their potential for misuse cannot be overlooked.'
After breaking the Rubio impersonations news, the Washington Post warns that 'In the absent of effective regulation in the United States, the responsibility to protect against voice impostors is mostly on you. The possibility of faked distressed calls is something to discuss with your family — along with whether setting up code words is overkill that will unnecessarily scare younger children in particular. Maybe you'll decide that setting up and practicing a code phrase is worth the peace of mind.'
That idea of a secure code word that a friend or relative can use to provide they're real was pushed by the FBI some months ago. 'Create a secret word or phrase with your family to verify their identity,' it suggested in an AI attack advisory.
'Criminals can use AI-generated audio to impersonate well-known, public figures or personal relations to elicit payments,' the bureau warned in December. 'Criminals generate short audio clips containing a loved one's voice to impersonate a close relative in a crisis situation, asking for immediate financial assistance or demanding a ransom.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Fox News
19 minutes ago
- Fox News
Smiling fugitive recaptured and returned to Kentucky after dramatic airport escape
A fugitive who escaped custody at Seattle-Tacoma International Airport in May appeared surprisingly pleased with his recapture, flashing a broad grin as law enforcement escorted him back to Kentucky. The Warren County Sheriff's Office shared the update on Sedrick T. Stevenson, thanking the other agencies for their help, stating that they "coordinated closely" with U.S. Marshals and Seattle-area agencies to ensure Stevenson's secure return. Photos released by the Warren County Sheriff's Office show Stevenson smiling cheerfully while seated on a plane alongside multiple law enforcement officers — a striking contrast to the circumstances of his return to custody. "Therefore, we wanted to ensure he was brought back without issue. We underwent coordination with the Port of Seattle Police, Seattle Police, US Marshals, Air Marshals, and TSA," the sheriff's office shared. Authorities took no chances with Stevenson this time and guaranteed he would return to Kentucky with zero issues as he was pictured strapped to a wheelchair and put in the plane's window seat under the careful watch of law enforcement. Deputies joked about the cross-country trip to retrieve Stevenson, pointing out it took nearly 24-hours to conduct the mission. "I am happy to report that after 2 direct flights, 4 time zone changes, and 21 straight hours, he was booked into the WCRJ," officials said. "He (Stevenson) received VIP service and ensured a 5-Star Yelp review." Stevenson, 28, who was wanted on warrants out of Bowling Green, Kentucky, snuck away from a contracted agent on May 4 when the agent lost control of him at the ticket counter at the airport. Port of Seattle Police confirmed via video cameras that Stevenson, who was in shackles, was caught on video escaping by boarding a light rail train and disappearing for more than a month until he was captured by U.S. Marshals. The U.S. Marshals Service told FOX 13 Seattle that Stevenson was arrested in a Seattle neighborhood, along with a second person who investigators said was reportedly assisting Stevenson in his escape. "This arrest sends a clear message: no matter how long it takes or how far someone runs, justice will catch up with them. Our deputies and taskforce officers worked tirelessly and with unwavering dedication to bring Stevenson back into custody. The community can rest easier, knowing a dangerous fugitive is no longer on the streets" U.S. Marshal Donrien Stephens told the outlet. Stevenson was being held in the King County jail until authorities in Kentucky were able to transport him back to their state. At the time of his escape, Stevenson was being extradited to Kentucky to face multiple charges, according to the U.S. Marshal's Office, including being a convicted felon in possession of a firearm, third-degree assault, and enhanced possession of a controlled substance. Fox News Digital reached out to the U.S. Marshal's Office, but did not immediately receive a response. Stepheny Price is a writer for Fox News Digital and Fox Business. She covers topics including missing persons, homicides, national crime cases, illegal immigration, and more. Story tips and ideas can be sent to
Associated Press
24 minutes ago
- Associated Press
DOGE sprouts in red states, as governors embrace the cost-cutter brand and make it their own
HARRISBURG, Pa. (AP) — The brash and chaotic first days of President Donald Trump 's Department of Government Efficiency, once led by the world's richest man Elon Musk, spawned state-level DOGE mimicry as Republican governors and lawmakers aim to show they are in step with their party's leader. Governors have always made political hay out of slashing waste or taming bureaucracy, but DOGE has, in some ways, raised the stakes for them to show that they are zealously committed to cutting costs. Many drive home the point that they have always been focused on cutting government, even if they're not conducting mass layoffs. 'I like to say we were doing DOGE before DOGE was a thing,' Iowa Gov. Kim Reynolds said in announcing her own task force in January. Critics agree that some of these initiatives are nothing new and suggest they are wasteful, essentially duplicating built-in processes that are normally the domain of legislative committees or independent state auditors. At the same time, some governors are using their DOGE vehicles to take aim at GOP targets of the moment, such as welfare programs or diversity, equity and inclusion programs. And some governors who might be eyeing a White House run in 2028 are rebranding their cost-cutting initiatives as DOGE, perhaps eager to claim the mantle of the most DOGE of them all. No chainsaws in the states At least 26 states have initiated DOGE-style efforts of varying kinds, according to the Economic Policy Institute based in Washington, D.C. Most DOGE efforts were carried out through a governor's order — including by governors in Florida, Iowa, Louisiana, Montana, New Hampshire and Oklahoma — or by lawmakers introducing legislation or creating a legislative committee. The state initiatives have a markedly different character than Trump's slash-and-burn approach, symbolized by Musk's chainsaw-brandishing appearance at a Conservative Political Action Committee appearance in February. Governors are tending to entrust their DOGE bureaus to loyalists, rather than independent auditors, and are often employing what could be yearslong processes to consolidate procurement, modernize information technology systems, introduce AI tools, repeal regulations or reduce car fleets, office leases or worker headcounts through attrition. Steve Slivinski, a senior fellow at the libertarian Cato Institute who researches state government regulatory structures, said that a lot of what he has seen from state-level DOGE initiatives are the 'same stuff you do on a pretty regular basis anyway' in state governments. States typically have routine auditing procedures and the ways states have of saving money are 'relatively unsexy,' Slivinski said. And while the state-level DOGE vehicles might be useful over time in finding marginal improvements, 'branding it DOGE is more of a press op rather than anything new or substantially different than what they usually do,' Slivinski said. Analysts at the pro-labor Economic Policy Institute say that governors and lawmakers, primarily in the South and Midwest, are using DOGE to breathe new life into long-term agendas to consolidate power away from state agencies and civil servants, dismantle public services and benefit insiders and privatization advocates. 'It's not actually about cutting costs because of some fiscal responsibility,' EPI analyst Nina Mast said. Governors promoting spending cuts Louisiana Gov. Jeff Landry rebranded his 'Fiscal Responsibility Program' as Louisiana DOGE, and promoted it as the first to team up with the federal government to scrub illegitimate enrollees from welfare programs. It has already netted $70 million in savings in the Medicaid program in an 'unprecedented' coordination, Landry said in June. In Oklahoma, Gov. Kevin Stitt — who says in a blurb on the Oklahoma DOGE website that 'I've been DOGE-ing in Oklahoma since before it was cool' — made a DOGE splash with the first report by his Division of Government Efficiency by declaring that the state would refuse some $157 million in federal public health grants. The biggest chunk of that was $132 million intended to support epidemiology and laboratory capacity to control infectious disease outbreaks. The Stitt administration said that funding — about one-third of the total over an eight-year period — exceeded the amount needed. The left-leaning Oklahoma Policy Institute questioned the wisdom of that, pointing to rising numbers of measles and whooping cough cases and the rocky transition under Stitt of the state's public health lab from Oklahoma City to Stillwater. Oklahoma Democrats issued rebukes, citing Oklahoma's lousy public health rankings. 'This isn't leadership,' state Sen. Carri Hicks said. 'It's negligence.' Stitt's Oklahoma DOGE has otherwise recommended changes in federal law to save money, opened up the suggestion box to state employees and members of the general public and posted a spreadsheet online with cost savings initiatives in his administration. Those include things as mundane as agencies going paperless, refinancing bonds, buying automated lawn mowers for the Capitol grounds or eliminating a fax machine line in the State Board of Licensure for Professional Engineers and Surveyors. Florida Gov. Ron DeSantis signed an executive order in February creating a task force of DOGE teams in each state agency. In the order, DeSantis recited 10 points on what he described as his and Florida's 'history of prudent fiscal management' even before DOGE. Among other things, DeSantis vowed to scrutinize spending by state universities and municipal and county governments — including on DEI initiatives — at a time when DeSantis is pushing to abolish the property taxes that predominantly fund local governments. His administration has since issued letters to universities and governments requesting reams of information and received a blessing from lawmakers, who passed legislation authorizing the inquiry and imposing fines for entities that don't respond. After the June 30 signing ceremony, DeSantis declared on social media: 'We now have full authority to DOGE local governments.' In Arkansas, Gov. Sarah Huckabee Sanders launched her cost-cutting Arkansas Forward last year, before DOGE, and later said the state had done the 'same thing' as DOGE. Her administration spent much of 2024 compiling a 97-page report that listed hundreds of ways to possibly save $300 million inside a $6.5 billion budget. Achieving that savings — largely by standardizing information technology and purchasing — would sometimes require up-front spending and take years to realize savings. ___ Follow Marc Levy on X at:
TechCrunch
44 minutes ago
- TechCrunch
Sequoia bets on silence
There is a time-honored crisis management strategy, wherein one says nothing and waits for the outrage to pass. For Sequoia Capital, the strategy worked pretty well this week. While partner Shaun Maguire initially weathered criticism over an inflammatory social media post, that initial indignation cooled quickly. Now, some seem to think that Maguire's defiant stance may even be strengthening his position. Business Insider actually called it 'good for deal flow' — controversy as competitive advantage. Sequoia's calculated gamble carries real risk, though. Another provocative post from Maguire that hits the wrong nerve, a shift in political winds, or escalating consequences could quickly transform their unflappable partner from an asset into a liability the firm can no longer afford to ignore. A crisis communications professional who has managed reputation disasters for dozens of major brands tells this editor, 'Firms like Sequoia are bulletproof until they aren't.' What happened Sequoia's hands-off approach was put to the test earlier this week when the storied venture firm found itself in the eye of a storm over Maguire's inflammatory comments about New York City mayoral candidate Zohran Mamdani. Maguire called him an 'Islamist' who 'comes from a culture that lies about everything' in a July 4th tweet on X that has since been viewed more than five million times. More than one thousand signatures have poured in since on a petition demanding that Sequoia condemn the remarks, investigate Maguire's conduct, and apologize. There's been a lot of talk about why Sequoia hasn't done this, with many outlets noting that Maguire isn't just any partner. This status owes partly to his friendship with Stripe's co-founder. According to reports, at a 2015 Founders Fund event, Maguire—then a Founders Fund-backed entrepreneur—defended Collison during an argument with Anduril's Palmer Luckey about quantum computing, earning Collison's friendship. The connection proved valuable when Maguire joined Google Ventures in 2016; he helped secure a $20 million Stripe investment during his first week. When Maguire left Google Ventures in 2019, Collison personally recommended him to Sequoia's partners. (Stripe has been in Sequoia's portfolio since 2010, with the firm investing more than $500 million over 15 years.) Maguire also led Sequoia's investment in Bridge, a stablecoin platform that Stripe acquired for $1.1 billion, and is reportedly Sequoia's link to Elon Musk, though this is probably somewhat overstated. Musk and Sequoia's global managing director, Roelof Botha, are both native South Africans and have known each other for more than 25 years, dating back to their time together at the then-nascent PayPal, where Botha was recruited personally by Musk. Despite that long relationship, the two haven't always seen eye to eye. Botha was highly critical of Musk's management style when Musk was CEO of the merged company, where Botha was CFO. Botha once told veteran journalist Ebbe Dommisse, 'I think it would have killed the company if Elon had stayed on as CEO for six more months. The mistakes Elon was making at the time were amplifying the risk of the business.' But Musk was at odds with pretty much that entire crew at the time, and those tensions have long since been resolved. Techcrunch event Save up to $475 on your TechCrunch All Stage pass Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections. Save $450 on your TechCrunch All Stage pass Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections. Boston, MA | REGISTER NOW The bigger point here: when you're managing tens of billions of dollars in assets and your firm's reputation rests on backing winners like Google, Stripe, and Nvidia, you don't easily cast aside a rainmaker. Meanwhile, Maguire's behavior suggests he's not backing down. After issuing a 30-minute video on X last weekend in which he apologized for offending so many — saying he was making a point about a political ideology and not one about a religion — he has doubled down with increasingly aggressive posts this week. He has claimed he has 'reverse engineered' his critics' 'command structure' and threatened to 'embarrass' anyone who escalates against him. He added that this is him at '1% throttle' and warned people not to 'fuck w children of the internet.' The silent treatment Sequoia has precedent for its approach to this situation. The firm has historically given its partners space to express themselves publicly, with figures like Doug Leone and Michael Moritz (who left the firm in 2023) representing different political perspectives. But there's a crucial difference between political diversity and inflammatory rhetoric and clearly to some, Maguire's comments extend beyond partisan politics into territory that alienates both political opponents and potential business partners. It's also worth remembering that even for Sequoia, there is a bright line. Michael Goguen, another, earlier rainmaker with the firm, was promptly shown the door when Sequoia learned of a sexual abuse lawsuit filed against him. The situations are hardly comparable; Goguen's issues were legal and personal, not ideological. At the same time, Sequoia has shown it isn't willing to circle the wagons at any cost, not if its reputation is at stake. Presumably, several factors inform Sequoia's do-nothing PR strategy, including how quickly people, faced with a constant flurry of news, move on from a scandal. The firm is also operating in a different political landscape right now in the U.S. Along with Donald Trump's victory and the rollback of DEI initiatives has come new tolerance for controversial speech. What might have been career-ending at an earlier point in time is now weathered more easily. The firm is also likely banking on the fact that while founders want partners who fit the traditional, more genteel VC mold, they want successful ones even more. Startups being courted by multiple top-tier firms might not like or agree with Maguire, but when Sequoia comes calling with its track record and almost bottomless pockets, most founders are going to welcome the firm with open arms. There's also the very real possibility that Sequoia is working on a contingency plan. (Sequoia declined to comment on Maguire's posts when reached by TechCrunch earlier this week.) Still, Sequoia's silence carries risks. Not all the signers have been confirmed, but the petition against Maguire includes the names of some prominent Middle Eastern executives and founders who have attested to signing it, and they represent the kind of diverse, global talent pool that drives innovation. By not addressing the controversy, Sequoia risks being seen as tacitly endorsing Maguire's views. Put another way, though the venture capital world has historically been remarkably forgiving of controversial figures with exceptional deal flow, the firm is gambling with its reputation in an increasingly connected global market where alienating entire regions and communities carries real business consequences. Whether that bet pays off will depend on how long the controversy lingers, how much business it actually costs Sequoia, and whether Maguire can resist the urge to push things past Sequoia's own tolerance threshold. (He has said he doesn't post anything that hasn't been 'excrutiatingly thought out.') History suggests that established financial firms with strong track records tend to outlive their scandals, even serious ones. When Apollo Global Management's Leon Black resigned in 2021 over his $158 million payments to Jeffrey Epstein, the firm's stock barely moved and shareholders seemed largely unfazed. Apollo just continued its aggressive deal-making under new leadership. Similarly, Kleiner Perkins survived Ellen Pao's high-profile gender discrimination lawsuit in 2015. But it took years and essentially an entirely new team for the storied venture firm to regain its footing in Silicon Valley's hierarchy. The lesson here may be that while controversial partners can be endured, the recovery timelines can vary significantly depending on how firms handle the crisis. For now, the crisis communications professional, who asked not to be named, has some advice for Maguire and, by extension, Sequoia. Regarding the video Maguire published in the aftermath of his initial comments, the expert said, 'I did think that apology addressed the ambiguities in [Maguire's] post. But it's a 30-minute video — you have to be really interested to watch this.' If there's a next time, the professional said, Maguire should 'do two videos — one for three minutes' and another, longer video, for anyone who wants to keep watching. Sometimes, the expert added, 'less is more.'
