Group-IB warns that organized investment fraud is using deepfake video “endorsements,” WhatsApp groups, and professional-looking fake crypto platforms to trick victims into sending money. The models described (“GoldBull” and “CoinLure”) include pump-and-dump stock manipulation and a large network of templated fake crypto investment sites, with evidence of impersonation and cross-platform coordination.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
“Welcome to our VIP WhatsApp group, today’s analyst video explains the next stock to buy before it pumps.” Sounds legit, right? Group-IB says fraud models called GoldBull and CoinLure use deepfake videos, WhatsApp groups, and fake crypto platforms to push pump-and-dump stock tips and steal deposits. Here’s the twist: more than 20 fake WhatsApp accounts impersonated one Australian economist, pushing links to platforms that accept only cryptocurrency and even demand extra payments before letting you withdraw. If any investment pitch starts in WhatsApp or Telegram, ignore the link and check the offer yourself on the firm’s official, regulated website or app before you even think about sending money.
The FBI warned that scammers are impersonating IC3 leadership using AI-generated (deepfake) videos and spoofed IC3 websites to trick prior fraud victims into sharing more personal and financial information. In one example, victims are contacted on Facebook Messenger by someone posing as an FBI…
Scammers impersonated Intesa Sanpaolo’s CEO via a fake WhatsApp message and then used an AI-cloned voice posing as a law-firm partner to pressure Fideuram’s chairman into approving an overseas transfer. The bank sent €95 million to foreign accounts (including China and Hong Kong) before detecting…
This bulletin describes multiple real-world scams where attackers make fake pages and messages look like routine, trusted experiences (search answers, Google login pop-ups, “giveaways,” and official-sounding calls). Examples include a fake Claude Max giveaway using a convincing fake Google sign-in…
The bulletin describes real-world social engineering where staff were tricked into disclosing sensitive data or access. In one case, Revolut employees responded to fraudulent information requests sent from a real government-domain email account, exposing extensive customer records. Separately,…
This bulletin describes multiple real-world social engineering campaigns where attackers impersonate IT support or use trusted-looking sharing and “Allow” prompts to gain access. Several campaigns abuse Microsoft Teams and document-sharing lures to trick employees into installing remote tools or…
INTERPOL’s Operation Jackal IV (Nov 2025–Jun 2026) targeted the money-laundering backbone behind global online scams, leading to 58 arrests and 263 suspects linked to West African organized crime groups. Cases included romance/investment scams targeting retirees, a fake-investment call center tied…
