Federal prosecutors have indicted Jacob Soall, Sharon Hazan,and Guy Sheetrit for allegedly stealing $129 million using artificial intelligence. The group impersonated corporate leaders and lawyers to trick organizations across several continents into wiring funds.
The 'Lawyer Call' script and AI voice cloning
The fraud operation relied on a sophisticated blend of social engineering and generative AI to create a "closed loop of credibility." According to the indictment, the defendants first sent emails that appeared to come from a company's CEO , creating a sense of urgency regarding a confidential transaction. To eliminate any doubt, the group used AI to mimic the voice and likeness of the executives during phone or video calls.
Jacob Soall played a specific role in this deception by impersonating attorneys based in the United Kingdom. As reported in the indictment, Soall utilized a handwritten script titled 'Lawyer Call' to master the specific jargon and procedural tone of a legal professionl. This meticulous preparation allowed the group to provide authoritative instructions for victims to wire massive payments to global bank accounts.
From Missouri hospitals to Florida pet food makers
The scale of the operation was vast , targeting thousands of companies over a period exceeding eighteen months. The indictment filed in the U.S. District Court in New York reveals that the group did not discriminate by industry, hitting critical infrastructure and commercial entities alike. Specific victims included hospital systems in California and Missouri, a mutual fund provider in Massachusetts, and a pet food manufacturer in Florida.
Other targets included a technology firm in the United Kingdom and a financial institution in Rhode Island. By focusing on accounting departments, the defendants exploited the inherent trust employees place in high-level corporate communications. The diversity of these targets suggests that the group's AI tools were versatile enough to penetrate various corporate cultures and security levels.
Cryptocurrency and the 'Superman Cash' aliases
To hide the trail of the $129 million,the defendants used a network of aliases and digital assets. Within their criminal circle,the trio operated under names such as 'Rocky Balboa,' 'Fat Boy,' and 'Superman Cash.' Once the victims wired the funds, the group converted the money into cryptocurrency to obscure the origin of the illicit proceeds before distributing the wealth among themselves and other accomplices.
The investigation also uncovered a history of financial crime for one of the participants. Court records indicate that Sharon Hazan had a prior conviction in a New York court in 2008 for conspiracy to commit bank fraud. This suggests that while the AI tools were new, the underlying criminal intent and methodology were rooted in traditional financial fraud.
A new era of generative AI weaponization
This case represents a significant escalation in how organized crime utilizes emerging technology. FBI Assistant Director in Charge James C.. Barnacle, Jr. stated that the operation demonstrates how advanced technology can be weaponized to commit fraud on a massive scale. This shift mirrors a broader trend where generative AI is moving from simple phishing emails to real-time, multi-sensory impersonations that can bypass traditional verification protocols.
The FBI is now urging businesses to move beyond simple email confirmation and implement multi-factor authentication and strict verbal confirmation protocols. The ability of Jacob Soall, Sharon Hazan, and Guy Sheetrit to operate across Spain, Israel, the UAE, and the UK highlights the borderless nature of AI-driven crime, making international cooperation essential for future disruptions.
The missing legal responses from Soall and Sheetrit
Despite the severity of the charges, several details remain unverified. As the report notes, lawyers for Guy Sheetrit and Jacob Soall did not immediately respond to requests for comment, and it remains unclear if Sharon Hazan has secured legal representation. Furthermore, the indictment suggests the trio may have been part of a larger, more entrenched network of cybercriminals, though the full extent of that network has not been disclosed.
Comments 0