DeepfakeHigh
Deepfake Voice Exploit Compromises Retool's Cloud Services
- Occurred
- Aug 27, 2023
- Published
- Sep 15, 2023
- Source
- AI Incident Database
Summary
In August 2023, a hacker reportedly was successful in breaching Retool, an IT company specializing in business software solutions, impacting 27 cloud customers. The attacker appears to have initiated the breach by sending phishing SMS messages to employees and later used an AI-generated deepfake voice in a phone call to obtain multi-factor authentication codes. The breach seems to have exposed vulnerabilities in Google's Authenticator app, specifically its cloud-syncing function, further enabling unauthorized access to internal systems.
Developers
- Unknown
Deployers
- Hackers
Harmed parties
- Retool employees
- Retool
- 27 of Retool's clients
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Deepfake voice used to bypass MFA causing significant data breach affecting 27 cloud customers.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8