Reported Audio Deepfake Impersonating CEO Karim Toubba Targets LastPass Employee via WhatsApp

A LastPass employee was reportedly targeted by an audio deepfake impersonating CEO Karim Toubba via WhatsApp. The message used voice-cloning AI in a social engineering attempt to create urgency and bypass security protocols. The employee recognized red flags, reported the incident, and no breach occurred. LastPass shared the incident publicly to raise awareness about deepfake-driven fraud campaigns targeting executives and companies.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved a targeted social engineering scam where fraudsters used an AI-generated voice clone of the LastPass CEO to attempt to deceive an employee for potential financial or operational gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was initiated by a human threat actor who intentionally used generative AI voice-cloning technology post-deployment to execute a social engineering attack.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of 'AI-generated content such as deepfakes', which falls under Risk Level 3 due to transparency and awareness obligations regarding synthetic media.

AI system and alleged parties

• AI system: voice-cloning AI
• AI purpose: Voice Generation; Text Style Replication
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scammer impersonating Karim Toubba
• Alleged harmed parties: LastPass employee, Karim Toubba, General public, Employees of LastPass

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1
• People reportedly exposed: 1

Potential causes

Management

• Inadequate Employee Training: Fails to prepare staff to identify sophisticated deepfake tactics.
• Delayed Policy Updates: Internal protocols fail to keep pace with rapidly evolving AI threats.

Technology

• Advanced Voice Cloning Tools: Enables scammers to replicate executive voices with high accuracy.
• Camera Injection Vulnerabilities: Allows feeding synthetic media directly into video streams.
• Accessible Deepfake Platforms: Lowers the skill barrier to create high-quality synthetic media.

Data Inputs

• Publicly Available Media Samples: Provides source audio and video of executives to train AI models.

Human Factors

• Vulnerability to Social Engineering: Urgency and trust cues trick employees into bypassing protocols.
• Remote Work Communication Gaps: Prevents quick face-to-face verification of suspicious requests.

Process and Methods

• Use of Unofficial Channels: Conducting critical business communications over apps like WhatsApp.
• Weak Financial Approval Workflows: Allows single-point authorization of high-value transactions.
• Absence of Liveness Checks: Fails to verify physical presence during video conferences.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from SC Media, Hackread, and LastPass's official blog provide consistent, clear, and detailed accounts of the specific attempted attack on the LastPass employee. There is no ambiguity about the outcome (thwarted, no breach, no financial loss) or the technology used (audio deepfake/voice cloning via WhatsApp).
• Ambiguities identified: None of significance regarding the primary LastPass incident, though the specific AI tool or platform used by the fraudsters is not named.

An attempted social engineering attack against a LastPass employee using an audio deepfake of the CEO was successfully thwarted. The incident resulted in no security compromise, financial loss, or national security impact, representing a localized corporate fraud attempt rather than a threat to national security.

• Overall national security impact: Negligible
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The incident is a past, resolved event representing an ongoing strategic concern regarding AI-enabled social engineering.
• Autonomy: Human-controlled. The AI tool was used purely as a utility to generate synthetic voice clips under direct human control.
• Novelty: Evolved capability. Represents an advancement in social engineering tactics by integrating multi-channel synthetic audio to target corporate employees.

Impact by dimension

• Physical security: Negligible. The incident did not target or affect any physical systems, critical infrastructure, or human safety.
• Information security: Negligible. The attack was thwarted with no compromise of intelligence capabilities, classified models, or corporate data.
• Sovereignty: Negligible. No state authority, territorial control, or core government operations were targeted or affected.
• Economic security: Negligible. The attempted social engineering attack was unsuccessful, resulting in no financial loss, data breach, or loss of technological advantage.
• Societal stability: Negligible. The incident was a localized corporate fraud attempt with no implications for societal stability or human rights.