Dubai cybersecurity expert warns AI-powered fraudsters are using personal data to target victims

Dubai: Dr Bushra Al Balushi, Director of Governance and Risk Management at the Dubai Electronic Security Center, warned that some fraudsters study victims before targeting them, gathering information about their work, interests and relationships to build detailed profiles. She made the remarks on the sidelines of the Cyber Security Media Forum, launched by the Dubai Media Academy, affiliated with the Dubai Media Foundation, in cooperation with the Dubai Electronic Security Center on October 13 to coincide with Cyber Security Awareness Month. Fraudsters use the information they gather to communicate in ways that appear natural and trustworthy, deceiving victims into clicking links or taking actions that give them access to data or accounts. Al Balushi warned against excessive sharing of personal information on social media. She said the method, known as social engineering, exploits information available about people and manipulates their trust rather than relying solely on hacking technical systems. A person may receive a call from an unknown individual urging them to click a link or take immediate action. The pressure of urgency can prompt them to comply without verifying the caller’s identity or whether the request is genuine. Humans are the weakest link Al Balushi stressed that humans remain the weakest link in cybersecurity, regardless of how advanced protection systems become. Institutions, particularly banks, provide multiple authentication methods and secure systems, but hackers can sometimes bypass them by deceiving users into taking steps that facilitate access to their data. Banks also have specialised units to combat cybercrime, but protecting users requires awareness of fraudsters’ methods and avoiding calls or messages designed to pressure them into making decisions without verification. Attempted fraud Al Balushi said the challenge is no longer limited to identifying obviously fake messages. The growing use of artificial intelligence by hackers and fraudsters has made it more difficult to distinguish genuine messages and links from deceptive ones. Some messages appear official and convincing, making it harder for users to determine whether they are genuine or fraudulent. She recalled receiving an official email invitation from someone introduced as the Deputy Secretary-General of the International Telecommunication Union. As she had never dealt with the Union before, she questioned the authenticity of the message and did not open or interact with it. She waited two days before contacting the Telecommunications Regulatory Authority and the Digital Government to verify the person’s identity and the authenticity of the email. She then discovered that the invitation was genuine and the sender did hold the stated position. Dr Bushra Al Balushi Al Balushi said the experience showed that legitimate messages can appear suspicious, while fraudulent messages can look official and credible. Users should therefore take time to verify the sender and the authenticity of messages through trusted communication channels before responding or opening links. Integrated system Al Balushi said there is an integrated coordination system between the Dubai Electronic Security Center and Dubai Police, with responsibility determined by the nature of the incident and report. Cybercrime cases were previously handled through a manual system before the launch of the “eCrime” platform in cooperation with Dubai Police. The competent authority depends on the nature of the incident and the entity targeted. If an employee suffers a breach in connection with their work, whether in the government or private sector, the Dubai Electronic Security Center handles the incident. If a person is subjected to cybercrime as an individual, Dubai Police is the competent authority. Some cases require cooperation between the two entities depending on the nature of the report. Risks of deepfakes Al Balushi warned about the dangers of deepfakes, fabricated content and misinformation. She said the country has been targeted through misleading content and that the volume of misinformation monitored was large compared with genuine information. Mirage programme The challenge prompted work on the “Mirage” programme, designed to distinguish genuine visual content from misleading material. Al Balushi said the programme has an accuracy rate of 91% in verifying the authenticity of content, which she described as the highest globally among open sources. The programme is scheduled to become available by the end of the year, after procedures to make it available within open sources are completed, helping users distinguish genuine content from fabricated material. Efforts to combat deepfakes also cover other forms of cybercrime, including impersonation of individuals, websites and government agencies, with initiatives aimed at countering evolving fraud methods. Al Balushi stressed that tackling these crimes requires both technical solutions and greater user aw