Digital injection attacks, where criminals bypass video biometrics with synthetic imagery, are now five times more common than presentation attacks, i.e. wearing a mask or showing a photo.
The finding comes from iProov’s new ‘Biometric Threat Landscape 2023 Report’, which it claims is the first of its kind. The report explores the attack trends facing biometric systems.
A digital injection attack is where a malicious actor can bypass a camera feed to trick a system with synthetic imagery and video recordings. The report cites the rise in digital injection attacks is due to the ease in which they can be automated, as well as the rise in access to malware tools.
It claims that over three quarters of malware available on the dark web is available for under $10, with the rise of malware-as-a-service and plug-and-play kits, just 2-3% of threat actors today are advanced coders.
Mobile phones are identified as increasingly vulnerable, with attacks now using emulators to mimic the behaviour of mobile devices. The report warns organisations against relying on device data for security, with a massive 149% increase in threat actors targeting mobile platforms in the second half of the year compared to the first.
iProov chief scientific officer Andrew Newell said, “Our analysis shows that the online threat landscape is always rapidly evolving. The 149% increase in attacks using emulators posing as mobile devices is a good example of how attack vectors arrive and scale very quickly. We have seen a rapid proliferation of low-cost, easy-to-use tools that has allowed threat actors to launch advanced, scalable attacks with limited technical skill.”
Last year, iProov partnered with AI-powered computer vision software provider Microblink. As part of the deal, iProov supplied its biometric- and document-based identity verification solution to Microblink, helping to protect organisations worldwide.
Copyright © 2023 FinTech Global
