A new report from biometric identity verification solutions provider iProov says cybercriminals are increasingly using artificial intelligence to carry out identity-based attacks at a much larger scale, raising risks for businesses and digital platforms.
The 2026 Threat Intelligence Report explains that generative AI is allowing attackers to create highly realistic fake identities and launch attacks faster than ever. One of the most striking findings is the sharp rise in attacks targeting iOS devices. Injection attacks surged by 1,151 percent in the second half of 2025 compared to the previous year, contributing to a total annual increase of 741 percent. This suggests that methods once limited to highly advanced or state-sponsored hackers are now becoming widely accessible.
The report also highlights the growing use of deepfake technology organizations. These fake identities are no longer confined to security systems but are now appearing in everyday corporate activities, particularly in video calls and digital communications. Advances in AI tools have made it easier to generate convincing video impersonations using minimal source material.
Supporting data from across the industry shows the scale of the issue. The Ponemon Institute found that 41 percent of organizations have experienced deepfake attacks targeting executives. Meanwhile, a study by Gartner reported that 37 percent of cybersecurity leaders have encountered deepfake incidents during video calls.
The report also points to Southeast Asia as a key region in the evolution of cybercrime. Attack activity in the region surged by 720 percent in the third quarter of 2025, with criminal groups using it as a testing ground for new techniques such as virtual camera attacks and stolen identity data. Once these methods prove successful, they are expanded to other regions, accelerating global cyber threats.
Experts warn that traditional, static approaches to identity verification are no longer effective against these rapidly evolving threats. Instead, organizations are being urged to adopt continuous monitoring systems that can adapt to new attack methods and align with updated international security standards.
“Identity is becoming the new battleground in cybersecurity,” said Dr. Andrew Newell of iProov, noting that AI is enabling attackers to scale digital impersonation like never before.
The report concludes that as AI-driven threats continue to grow, organizations must strengthen their defenses with more flexible and responsive security systems to protect digital identities and maintain trust.
