Description: A LastPass employee was reportedly targeted by an audio deepfake impersonating CEO Karim Toubba via WhatsApp. The message used voice-cloning AI in a social engineering attempt to create urgency and bypass security protocols. The employee recognized red flags, reported the incident, and no breach occurred. LastPass shared the incident publicly to raise awareness about deepfake-driven fraud campaigns targeting executives and companies.
Editor Notes: This incident reportedly occurred on 04/10/2024. It was ingested into the AI Incident Database on 06/13/2025.
Entities
View all entitiesAlleged: Unknown deepfake technology developer and Unknown voice cloning technology developer developed an AI system deployed by Unknown scammers and Unknown scammer impersonating Karim Toubba, which harmed Karim Toubba , LastPass employee , Employees of LastPass and General public.
Alleged implicated AI systems: Unknown deepfake technology , Unknown voice cloning technology and WhatsApp
Incident Stats
Incident ID
1100
Report Count
2
Incident Date
2024-04-10
Editors
Daniel Atherton
Incident Reports
Reports Timeline
For the last several years, the cyber threat intelligence community has been concerned about the larger proliferation of "deepfake" technology and its potential use by fraudsters against companies and/or individuals. "Deepfakes" use generat…
Password management giant LastPass narrowly avoided a potential security breach after a company employee was targeted by a deepfake scam. The incident, detailed in a blog post by LastPass, involved an audio deepfake impersonating CEO Karim …
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?
Similar Incidents
Did our AI mess up? Flag the unrelated incidents
Similar Incidents
Did our AI mess up? Flag the unrelated incidents