Scammers Utilize Deepfake and AI in YouTube Stream Hijacking, Stealing Over $600K in ‘Double Your Money’ Crypto Fraud.
In a disturbing combination of artificial intelligence (AI), deep fakes, and cryptocurrency, cybercriminals have orchestrated a complex scheme to steal over $600,000 from unsuspecting victims through a new tactic known as Stream-jacking.
Bitdefender’s latest report, titled “Stream-Jacking 2.0,” has exposed the malevolent use of technology and deception, revealing the evolution of crypto scams that exploit users through YouTube channels.
The Rise of Stream-Jacking:
This sophisticated cybercrime involves the hijacking of popular YouTube accounts, the creation of AI-generated deepfake videos, and the execution of cryptocurrency scams. The scammers impersonate figures such as Elon Musk and Michael Saylor, as well as brands like XRP and Tesla, to lure unsuspecting users into their trap by employing classic “Double Your Crypto” cons.
According to Bitdefender’s investigation, these criminals have successfully stolen $600,000 through this elaborate scam. The most commonly impersonated entities include XRP, MicroStrategy, SpaceX, Binance, Elon Musk, Michael Saylor, and Changpeng Zhao (“CZ”).
The Scammers’ Hijacking Strategy:
The scammers begin by strategically targeting high-value YouTube accounts with millions of subscribers in countries like the US, Brazil, India, Indonesia, Mexico, Vietnam, UK, France, Spain, and more. Once a YouTube account is compromised, the criminals quickly transform it by changing names, setting videos to private, deploying deceptive avatars and banners, and linking malicious websites in altered channel descriptions.
Furthermore, the scammers take advantage of breaking news events related to cryptocurrency, blockchain, and renowned figures to attract a larger audience. Recent events such as the SEC-XRP trial, SpaceX USSF-52 flight, and leadership changes in major brands are often used as bait.
AI-Powered Deep Fakes:
A concerning advancement in criminal tactics involves the use of deepfake videos impersonating public figures, adding a layer of authenticity to the scams. These deep fakes, which are of decent quality, feature figures like MicroStrategy’s former CEO, further contributing to the deception.
The success of the illegal streams relies on spamming techniques, with Bitdefender identifying hundreds of malicious broadcasts in a short period. The top hijacked accounts have over 31 million subscribers, indicating the scale of this criminal enterprise.
Conclusion – Insights and Advice:
While YouTube promptly removes malicious live streams, Bitdefender notes a lack of preventive measures against these scams. Users are urged to exercise caution, avoid clicking on links in suspicious video descriptions, and refrain from scanning QR codes in crypto giveaway promotions.
The advice remains simple: “If it sounds too good to be true, it probably is!”
As cybercriminals adapt and refine their techniques, users are advised to stay aware, cautious, and to immediately report such scams.
The intersection of technology and deception demands heightened vigilance from both platforms and users to avoid these evolving threats.