AI Impersonation Exposes Help Desk Identity Gaps

Generative AI is making it easier for attackers to impersonate employees and target help desks, according to TechRadar contributor Patrick Harding. The article says attackers can use cloned voices, deepfake video and AI agents to pose as staff and seek password resets, device enrollment or multi-factor authentication (MFA) overrides.

Help desk checks often rely on knowledge-based questions, employee records or manager approvals. Harding argues these methods are vulnerable when personal data is widely available and AI can convincingly mimic people. The article says successful attacks can lead to account takeover, data theft or ransomware deployment.

Harding calls for identity systems to apply strong verification to support and account-recovery workflows as well as sign-ins. He describes FIDO-based authentication using device-bound credentials and biometrics, and verifiable credentials stored in digital wallets. These approaches could let systems validate identity through cryptographic proof rather than personal information or manual judgment.

The article also proposes self-service account recovery backed by strong authentication, which it says could reduce help desk workload and opportunities for social engineering. It cites a figure that 75% of consumers are more concerned about personal data security than they were five years ago. The excerpt ends while describing an architecture with separate policy and runtime layers.