CyberWire Daily Behind the firewall, trouble brews.
16 snips
Jul 11, 2025 
Catherine Woneis, VP of Product at Fingerprint, sheds light on the escalating issue of music royalty fraud driven by bots. She reveals how fraudsters use AI-generated music and fake artists to manipulate streaming metrics, raking in millions. The discussion also touches on critical cybersecurity vulnerabilities, including flaws in popular software, and the broader implications of AI on security. Woneis emphasizes the necessity for companies to adopt robust bot detection solutions amid the ongoing digital fraud battle.
AI Snips
Chapters
Transcript
Episode notes
Bot Army Music Fraud
- A fraudster created 10,000 bot accounts to stream his own AI-generated music and earn over $10 million.
- He used racks of laptops playing randomized playlists to simulate thousands of listeners and collect royalties.
Detecting Automated Music Fraud
- Detect fraud by identifying clues like VPN use, bot scripts, multi-account browsers, and device farms.
- Use combined signals such as location mismatch and device tampering to catch sophisticated royalty fraud.
Intent Over Automation Detection
- Increasing automated user activity means fraud detection must distinguish between benign automation and malicious intent.
- Intent and behavioral patterns matter more than simply detecting automation presence.