By Marshall Bennett, Researcher at Adaptive Security In March 2025, a finance director at a multinational firm in Singapore joined what appeared to be a routine Zoom call with her senior leadership team. The CFO was there. Other executives appeared on screen. Everyone looked right. Everyone sounded right. She authorized a $499,000 transfer before anyone flagged the fraud. Every face on that call was AI-generated. This attack has a template. In early 2024, the same approach was used to steal $25.6 million from Arup, one of the world’s largest engineering firms, in a single afternoon. The method has spread widely, and the tools behind it have grown cheaper and easier to use every month since. The organizations that have stopped these attacks all found the same answer: train your people to…