A security awareness training designer wants to create a module specifically about GenAI-enabled social engineering. Which scenario best illustrates a 'novel' GenAI-enabled attack that would NOT have been feasible before 2022?
- A.A phishing email with a spoofed domain name impersonating the company's IT department
- B.A real-time video call where the caller's face is replaced by a convincing deepfake of a known executive, combined with a cloned voice, allowing an attacker to conduct a live interactive impersonation conversation
- C.A phone call from someone claiming to be the IRS demanding immediate gift card payment
- D.A social engineering call where the attacker claims to be a new IT contractor needing temporary access credentials
Why B is correct