AI & Healthcare Security: Health-ISAC Alert
AI: Double-Edged Sword in Digital Identity and Fraud Prevention
Updated June 03, 2025
Artificial intelligence presents both a growing threat and a potent defense in the realm of digital identity, according to a Health-ISAC report. The report highlights how generative AI is fueling sophisticated cyberattacks, including deepfakes and phishing scams, especially targeting the health sector. However, it also emphasizes AI’s crucial role in bolstering digital identity systems through advanced biometric analysis and real-time fraud detection.
The report warns of foreign actors, notably from North Korea, leveraging AI tools and stolen data to impersonate job applicants. These individuals use deepfakes to ace remote IT job interviews, enabling them to steal sensitive data or fund illicit activities. The report stresses that this is not a hypothetical scenario but an active threat.
While organizations focus on defending against AI-driven attacks,the report underscores AI’s value as a defensive tool. AI-powered systems can enhance document verification by analyzing security features and validating demographic data. Facial recognition can also determine if an image is authentic.
the report asserts that biometric authentication, combined with AI analysis of movement and facial expressions, is essential for distinguishing real users from impostors. Behavioral biometrics, which monitor keystroke patterns and navigation, provide an additional layer of security by flagging unusual activity.
Job applicant fraud has emerged as a significant vulnerability, with adversaries using VPNs and “laptop farms” to conceal their locations during video interviews. The report cites Gartner data projecting that one in four job applicants could be fake by 2028. It recommends rigorous identity verification using government-backed systems and third-party tools.
The rise of AI has dramatically enhanced phishing attacks. credential phishing surged by 703% in the latter half of 2024, with attackers using AI to craft convincing, error-free messages.AI can counter these attacks by analyzing email patterns, evaluating suspicious domains, and detecting manipulative language.
“AI isn’t just a tool in the attacker’s arsenal—it’s also one of the few defenses that can keep pace,” the report concluded.
What’s next
Organizations should prioritize implementing AI-powered verification,biometric liveness detection,and behavioral monitoring to safeguard against evolving threats to digital identity and prevent fraud.
