April 25

5 Ways cybercriminals are using AI: Content localization

0  comments

The translated text reads: 

“In this instructions, we explain some duties to you as below for keeping your and your neighborhood’s safety from any troubles.

We show you three signs which explain some kind of degees when you ignore our attentions as below;”

This quality of translation is common because automatic word-for-word translation services like Google Translate services are inexpensive and widely accessible. Real localization can be expensive because real people are required to make the content look and feel like it was created specifically for that locale.

Although human intervention is required for high-quality localization, there are many good uses for AI and GenAI in content localization. MagellanTV uses GenAI and machine learning (ML) to facilitate the translation of its documentaries for other regions. The AI performs language and idiom translation and shortens the sentences as needed to meet the time constraints of each show.  MagellanTV reports they have been able to reduce translation costs from $20 per minute to $1 per minute, and that cost reduction has allowed them to expand into more languages.

Online retailers regularly use AI technologies to localize product descriptions, colors, images, and promotional campaigns. With proper learning and rules in place, an AI system can support a personalized shopping experience that appears to have been created specifically for the local market.

Content localization and cyberattacks.

You can think of AI localization as a tool that supercharges the AI-powered phishing attacks we covered here. According to the 2023 Annual Threat Assessment of the U.S. Intelligence Community, the top countries targeted for cyberattacks are the United States, its allied countries, and partner countries. The top countries of origin for cyberattacks are reported to be China, Russia, and Iran. These countries focus heavily on espionage, disruption, and propaganda/influence. AI-enhanced content localization can eliminate grammatical errors, standardize the manner of speaking, and learn from attacks and responses. Phishing attacks target industries like defense, energy, biotechnology, and other manufacturing and infrastructure. These industries all have industry-specific language that AI can learn quickly. This use of AI can also help threat actors learn the idioms and jargon of the target language, which helps them script more convincing deepfakes and voice-phishing (vishing) attacks.

Nation-state actors that attempt to influence public opinion and political outcomes in other countries rely heavily on sounding like they are local. This is another area where AI-enhanced localization can help teach these criminals the importance of certain languages, symbols, special interest groups, and regional events. This is used to spread disinformation and manipulate the public through social media and other forums. Some nation-state threat actors will use disinformation tactics to monitor individuals and groups that are seen as threats to the home government. This activity is part of a larger government effort to suppress dissent.

Even the low-skilled threat actor can create a global phishing campaign with something like FraudGPT.  This improves opportunities around foreign holidays, natural disasters, and even pandemic response.

Protect yourself from malicious content.

As with most threats, there’s no single method to protect yourself from attacks created or enhanced by AI, but there are some best practices you can follow:

Companies

Individuals

 

Education

Conduct regular security awareness training on identifying and responding to phishing attempts.

Be aware of the latest phishing techniques and how they may be tailored to your local context. If your area is affected by an earthquake, wildfire, or other disaster, you may be targeted for phishing attacks that try to lure you with information on recovery efforts or financial assistance.

Policies and Practices

Implement and enforce company-wide security protocols regarding communication and data sharing.

Always question the authenticity of unsolicited, localized messages, especially if they prompt for action. Watch for errors that you wouldn’t expect from a native speaker or someone who is familiar with the technical language of your industry.  

Technologies

Invest in email protection with advanced threat detection and incident response tools that can adapt to evolving threats.

Use email filtering, antivirus programs, browser security extensions, and other endpoint defenses.

Barracuda can help.

Navigating the complex landscape of cybersecurity and AI can be difficult. Download our new e-book to see how we can help you make sense of the risks and opportunities.


Tags


You may also like

{"email":"Email address invalid","url":"Website address invalid","required":"Required field missing"}

Get in touch

Name*
Email*
Message
0 of 350