Full Report
The update also includes new details around the specific tactics and talking points impersonators use to ensnare victims. The post FBI says ‘ongoing’ deepfake impersonation of U.S. gov officials dates back to 2023 appeared first on CyberScoop.
Analysis Summary
# Morning News Roll-up December 19, 2025
## Overview
Recent FBI updates reveal a long-running social engineering campaign dating back to 2023 that utilizes AI voice cloning and encrypted messaging to impersonate high-ranking U.S. government officials. The primary objective is the extraction of sensitive data, classified information, and financial assets from associates and family members of targeted officials.
## Top Stories
### FBI Updates Warning on Deepfake Impersonation of U.S. Officials
- Summary: The FBI issued an updated Public Service Announcement (PSA) stating that malicious actors have been using AI voice cloning tools to impersonate White House, Cabinet-level, and Congressional officials since 2023. The campaign lures victims into moving conversations to encrypted apps like Signal, where attackers request sensitive personal information, passport photos, or wire transfers under the guise of official vetting or business opportunities.
- Source: hxxps://cyberscoop[.]com/fbi-says-ongoing-deepfake-impersonation-of-us-officials-dates-back-to-2023/
### White House AI Chip Export Policy and DOJ Smuggling Prosecutions
- Summary: The U.S. Department of Justice is actively prosecuting chip smuggling rings attempting to route restricted computer chips to China. This enforcement comes amid political friction, as some critics challenge the White House's broader strategy regarding the export of AI-capable hardware to Chinese markets, citing national security concerns.
- Source: hxxps://cyberscoop[.]com/white-house-sends-ai-chips-to-china-trump-doj-prosecutes-chip-smugglers/
### Cybersecurity Insurer Coalition Introduces Deepfake Coverage
- Summary: In response to the rise of AI-driven social engineering, cybersecurity insurer Coalition has announced new coverage options specifically for incidents involving deepfakes. The policies are designed to mitigate reputational harm and financial losses incurred by organizations targeted by AI-assisted impersonation and fraud.
- Source: hxxps://cyberscoop[.]com/url-coalition-cybersecurity-insurance-coverage-deepfakes-reputational-harm/
---
# Main Topic
Ongoing AI-powered deepfake impersonation campaign targeting U.S. government officials and their associates for espionage and financial gain.
## Key Points
- **Timeline Revision:** The FBI has backdated the start of this campaign to at least 2023, spanning both the Biden and Trump administrations.
- **Sophisticated Impersonation:** Attackers use AI voice cloning (vishing) to mimic the voices of senior U.S. state government, White House, and Cabinet-level officials.
- **Social Engineering Hooks:** Victims are often enticed with offers of meetings with the President, nominations to corporate boards, or discussions on topics where the victim is a known expert.
- **Data Harvesting:** A secondary goal is the theft of contact lists to facilitate lateral movement and target new victims who would logically be in contact with the compromised individual.
## Threat Actors
- **Attribution:** Unknown/Unspecified "malicious actors."
- **Motivations:** Potential mixture of state-sponsored espionage (classified/sensitive information gathering) and financial gain (wiring funds).
## TTPs
- **Initial Contact:** SMS/Smishing messages introducing the persona.
- **Platform Migration:** Pivoting the conversation to encrypted messaging apps (Signal, WhatsApp, Telegram) to avoid detection and exploit the perceived legitimacy of high-level officials using secure apps.
- **AI Voice Cloning:** Utilizing AI tools to conduct voice calls that sound like the impersonated official to build trust.
- **Contact List Synchronization:** Requesting victims to sync device contacts, which is then used to identify further high-value targets.
- **Vetting Ruse:** Using "official vetting" as a pretext to request passport photos and other PII.
## Affected Systems
- **Platforms:** Mobile devices (iOS/Android), specifically via SMS and encrypted messaging applications (Signal, WhatsApp, Telegram).
- **Target Demographics:** U.S. government officials, their family members, personal acquaintances, and professional associates.
- **Scope:** Broad targeting of the U.S. political and executive landscape.
## Mitigations
- **Verification:** Independently verify the identity of any official reaching out via personal or encrypted channels through established, official government contact methods.
- **Access Controls:** Deny requests from third-party or messaging apps to sync or access personal contact lists.
- **Information Handling:** Never share sensitive documents (passports, PII) or financial information over messaging apps, regardless of the perceived identity of the requester.
- **Reporting:** Report suspected impersonation attempts to the FBI’s Internet Crime Complaint Center (IC3).
## Conclusion
The use of AI voice cloning has lowered the barrier for sophisticated social engineering, allowing attackers to exploit the trust associated with high-ranking public figures. This campaign is particularly dangerous due to its longevity (dating back to 2023) and its focus on both espionage and fraud. Organizations and individuals associated with government entities should treat all unsolicited communications on encrypted apps with high suspicion, even if the voice sounds familiar.