Unit 42 researchers have uncovered a series of deepfake scam campaigns that exploit the likenesses of well-known public figures to deceive victims. These scams use AI-generated videos featuring celebrities, news anchors, and government officials to promote fraudulent investment schemes and fake giveaways. Targeting specific countries, these campaigns have been found in multiple languages, including English, Spanish, French, and Russian, suggesting a sophisticated level of planning and targeting.
The researchers believe that many of these scams originate from a single threat actor group due to similarities in their infrastructure and tactics. The scams typically involve creating deepfake videos where AI-generated audio is added to an existing video, followed by the use of lip-syncing technology to match the altered audio. This tactic is highly effective in creating a convincing illusion, making it easier for scammers to manipulate potential victims.
The scams are not limited to just one type of fraud. The study found various themes being used, ranging from fake investment schemes to false government-sponsored giveaways. The campaigns are often hosted on newly registered domains that are accessed globally, amplifying their reach and impact. Researchers also noted that traditional investigative methods remain effective in tracking these scams, despite the advanced use of AI technologies.
A recent scam, the Quantum AI scam is a particularly sophisticated fraud operation that uses deepfake videos of public figures, primarily Elon Musk, to lure victims into a fake investment scheme. Here’s how it typically unfolds:
- Initial Contact: Scammers promote Quantum AI through social media ads or fake news articles. These often feature AI-manipulated videos of Elon Musk or other celebrities endorsing the platform.
- Landing Page: Victims are directed to a scam webpage where they’re asked to provide their contact information.
- Phone Call: A scammer calls the victim, instructing them to pay around $250 to access the Quantum AI platform.
- Fake Investment App: Victims are told to download a special app for ‘investing’ more funds.
- False Profits: The app’s dashboard shows small, fake profits to build trust.
- Escalation: Scammers persuade victims to deposit more money, sometimes allowing small withdrawals to appear legitimate.
- Final Deception: When victims try to withdraw larger sums, scammers either demand withdrawal fees or cite reasons like tax issues to block access.
- Account Lockout: Finally, victims are locked out of their accounts, with scammers pocketing the remaining funds.
While this is a fairly simple scam, as deepfake technology continues to evolve, expect attackers to hone their skills at using this new set of tools to enhance their ability to launch new cybercrime scams.
In response, organizations will have to strengthen their defenses and train individuals to remain vigilant, particularly when encountering unexpected or suspicious video content online.
