preventions
- ID: SPV052
- Created: 26th August 2026
- Updated: 26th August 2026
- Contributors: Nimer Kees, The ITM Team, Yonatan Machluf,
Security Awareness Training on Synthetic-Media Social Engineering
Organizations should train personnel to recognize synthetic-media impersonation involving trusted figures, including senior leaders, colleagues, and other authoritative individuals.
Training should cover fabricated voice, likeness, and mannerisms used to create false legitimacy and influence decision-making. Synthetic-media attacks should be addressed as a distinct social-engineering risk rather than treated only as a generic phishing technique.
Personnel should be taught to verify identity through approved independent channels before acting on sensitive, urgent, financial, or otherwise consequential requests.