Rubio impersonation campaign underscores broad risk of AI voice scams

• The hoax follows a May FBI warning about a text and voice messaging campaign to impersonate senior U.S. officials that targeted many other current and former senior government officials and their contacts.

Driving the news: U.S. authorities don't know who is behind the campaign, in which an imposter claiming to be Rubio reportedly contacted three foreign ministers, a member of Congress and a governor, the Washington Post first reported.

• The scam used a Signal account with the display name "[email protected]," according to a State Department cable obtained by multiple outlets, in an attempt to contact powerful officials "with the goal of gaining access to information or accounts."
• A senior State Department official told Axios in a statement that it is aware of the incident and is currently investigating.
• "The Department takes seriously its responsibility to safeguard its information and continuously takes steps to improve the department's cybersecurity posture to prevent future incidents," the official said but declined to offer further details.

Context: With just seconds of audio, AI voice-cloning tools can copy a voice that's virtually indistinguishable from the original to the human ear.

• Experts say that the tools can have legitimate accessibility and automation pros — but it can also be easily weaponized by bad actors.
• Last year, fake robocalls used former President Biden's voice to discourage voting in the New Hampshire primary.
• In June, the Canadian Centre for Cyber Security and the Canadian Anti-Fraud Centre warned of a text and AI-generated voice messaging impersonation campaign in which threat actors pretended to be senior officials and prominent public figures to steal money and information.

Flashback: The accessibility of voice cloning tech has exploded in recent years, with hundreds of tools available, said Vijay Balasubramaniyan, the CEO and founder of Pindrop, which specializes in voice fraud prevention.

• "Each tool is becoming even more, for lack of a better word, idiot proof, in terms of how easy it is to just create something," he said. "It's all just push of a button."
• Audio of public officials and celebrities is readily available for bad actors to seize online, he noted. But ordinary people are still just as at risk.

• "I think we're in the Wild, Wild West as far as information is concerned," he said.

Between the lines: The Trump administration is particularly vulnerable to these types of scams due to its lax personal security practices and massive cuts to the country's defensive cyber operations.

• Trump has reportedly been picking up the phone for anyone who calls, and he loves using his personal cell phone — making him a prime target for spoofed calls and impersonation attempts.
• Officials have leaned heavily on Signal for confidential conversations — even accidentally messaging military strike plans to the Atlantic's top editor.
• Even before returning to office, Trump's allies have said they've fallen for an Iran-backed spear-phishing campaign.

The intrigue: Government-issued phones typically have more advanced identity authentication tools and operate on private government networks — making it easier to stop suspicious activities before they come in.

Reality check: Most cybercriminals don't even need to use AI — people are still falling for the same old tricks, including texts from fake job recruiters.

• Americans lost over $12.5 billion to fraud last year, up 25% from 2023, according to the FTC.

Go deeper: AI voice-cloning scams: A persistent threat with limited guardrails