概要: 2025年には、サービス・オーストラリアとセンターリンクを装ったとされる大規模なフィッシング攻撃により、27万件以上の詐欺メールが送信されたと報じられています。Mimecastのアナリストによると、攻撃者(MCTO3001と指定)はAIツールを用いて、政府を装った非常に説得力のあるメッセージと回避技術を生成し、脆弱なオーストラリア国民と公共機関を標的にしていたとのことです。被害者は、認証情報の盗難やその後のデジタルエクスプロイトの危険にさらされたと報告されています。
Editor Notes: Timeline note: According to Mimecast, the alleged phishing campaign had reportedly been active for roughly four months prior to publication, with attackers sending an average of 70,000 AI-generated spoofed government emails per month. The activity reportedly appears to have been ongoing from approximately July 2025 through November 2025. The incident ID date of 11/17/2025 is taken from The Sydney Morning Herald's initial reporting.
Alleged: Generative AI developers developed an AI system deployed by MCTO3001 と Cybercriminals, which harmed Medicare of Australia beneficiaries , Government of Australia , General public of Australia , General public , Centrelink beneficiaries , Centrelink , Australian welfare recipients , Australian businesses と Epistemic integrity.
インシデントのステータス
Risk Subdomain
A further 23 subdomains create an accessible and understandable classification of hazards and harms associated with AI
4.3. Fraud, scams, and targeted manipulation
Risk Domain
The Domain Taxonomy of AI Risks classifies risks into seven AI risk domains: (1) Discrimination & toxicity, (2) Privacy & security, (3) Misinformation, (4) Malicious actors & misuse, (5) Human-computer interaction, (6) Socioeconomic & environmental harms, and (7) AI system safety, failures & limitations.
- Malicious Actors & Misuse
Entity
Which, if any, entity is presented as the main cause of the risk
Human
Timing
The stage in the AI lifecycle at which the risk is presented as occurring
Post-deployment
Intent
Whether the risk is presented as occurring as an expected or unexpected outcome from pursuing a goal
Intentional
インシデントレポート
レポートタイムライン
Loading...