Cybercriminal groups have weaponized AI without the constraints of regulation or ethical concerns, maintaining approximately a two-year technological lead over the companies they target. This approach enables them to deploy advanced fraud techniques before defenses can be developed. These criminal enterprises have established robust ecosystems replete with specialized tools, roles and communities to share successful techniques.
Video courtesy of Bank Info Security.
See Also: Unlocking Enterprise Productivity and Innovation Through Secure Agentic AI
“There are dedicated scammers who just build the tools, and they’re called crime-as-a-service vendors. One of the pieces of software which can generate a fake synthetic video of you … costs $10,000 a month subscription for getting access to this PC software, and it’s exclusively being used by criminals,” said Kevin Gosschalk, founder and CEO of Arkose Labs.
In this video interview with Information Security Media Group at RSAC Conference 2025, Gosschalk also discussed:
- How fraud techniques vary by industry, with airlines targeted specifically for loyalty point theft;
- Why underground communities with nearly a million members openly share tactics on platforms like Telegram;
- How behavioral analysis can identify fraudulent patterns that criminals cannot easily disguise.
Gosschalk has been instrumental in building a suite of fraud and abuse prevention solutions that deliver long-term remediation from attacks by breaking the underlying economics behind online fraud. Under his leadership, Arkose Labs has raised more than $114 million in venture funding. Prior to Arkose Labs, Gosschalk worked in biomedical research where he used machine vision technology for early detection of diabetes.