Thursday, May 1, 2025
Homecyber securityThreat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication

Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication

Published on

SIEM as a Service

Follow Us on Google News

Threat actors are leveraging a newly discovered deepfake tool, ProKYC, to bypass two-factor authentication on cryptocurrency exchanges, which is designed specifically for NAF (New Account Fraud) attacks and can create verified but synthetic accounts by mimicking facial recognition authentication.

By overcoming these security measures, threat actors can engage in money laundering, create mule accounts, and perpetrate other fraudulent activities. 

The prevalence of such attacks is increasing, with losses exceeding $5.3 billion in 2023 alone, where the sophistication of ProKYC highlights the growing threat posed by deepfake technology to financial institutions.

- Advertisement - Google News

Analyse Any Suspicious Links Using ANY.RUN’s New Safe Browsing Tool: Try for Free

Dark web shop selling counterfeit documents

AI-powered tools are enhancing cybercriminals’ ability to bypass multi-factor authentication (MFA) by generating highly realistic forged documents, where traditionally, fraudsters relied on low-quality scanned documents purchased from the dark web. 

However, AI-driven tools can now create highly detailed forged documents that are difficult to distinguish from authentic ones, making it easier for cybercriminals to deceive security systems and gain unauthorized access to sensitive information, which poses a significant challenge to organizations seeking to protect their data and systems from malicious attacks.

Dark web shop selling counterfeit documents 

ProKYC’s deepfake tool is malicious software sold on the dark web that exploits deep learning technology to circumvent authentication processes, which can generate counterfeit documents and realistic videos of fabricated identities, thereby deceiving facial recognition systems. 

The tool’s effectiveness is demonstrated by its ability to bypass ByBit’s security measures. This poses a significant threat to online platforms as it undermines their authentication mechanisms and facilitates fraudulent activities.

The attacker leverages AI-generated deepfakes to create a synthetic identity complete with a forged government document (e.g., Australian passport) and a facial recognition bypass video. 

The video adheres to facial recognition system instructions (e.g., head movements) and is fed into the system instead of a live camera feed, deceiving the system and facilitating a successful account fraud attack.

Detecting account fraud attacks is challenging due to the trade-off between restrictive biometric authentication systems that lead to false positives and lax controls that increase the risk of fraud. 

High-quality images and videos, often indicative of digital forgeries, are red flags. Inconsistencies in facial parts and unnatural eye and lip movements during biometric authentication can also signal potential fraud and require manual verification.

According to Cato Networks, organizations must proactively defend against AI threats by collecting threat intelligence from various sources, including human and open-source intelligence. 

While threat actors are constantly evolving their use of deepfake technologies and software, it is essential to remain informed about the most recent trends in cybercrime.

Strategies to Protect Websites & APIs from Malware Attack => Free Webinar

Varshini
Varshini
Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Latest articles

Trellix Launches Phishing Simulator to Help Organizations Detect and Prevent Attacks

Trellix, a leader in cybersecurity solutions, has unveiled its latest innovation, the Trellix Phishing...

AiTM Phishing Kits Bypass MFA by Hijacking Credentials and Session Tokens

Darktrace's Security Operations Center (SOC) in late 2024 and early 2025, cybercriminals have been...

Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations

Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising...

Researchers Reveal Threat Actor TTP Patterns and DNS Abuse in Investment Scams

Cybersecurity researchers have uncovered the intricate tactics, techniques, and procedures (TTPs) employed by threat...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Trellix Launches Phishing Simulator to Help Organizations Detect and Prevent Attacks

Trellix, a leader in cybersecurity solutions, has unveiled its latest innovation, the Trellix Phishing...

AiTM Phishing Kits Bypass MFA by Hijacking Credentials and Session Tokens

Darktrace's Security Operations Center (SOC) in late 2024 and early 2025, cybercriminals have been...

Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations

Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising...