{
  "name": "The Emerging Dynamics of Deepfake Scam Campaigns on the Web",
  "slug": "the-emerging-dynamics-of-deepfake-scam-campaigns-on-the-web",
  "description": "Researchers have uncovered dozens of scam campaigns utilizing deepfake videos featuring public figures like CEOs, news anchors, and government officials. These campaigns target victims in multiple countries using various languages. The scams promote fake investment schemes and government giveaways. Hundreds of domains have been used, each accessed an average of 114,000 times globally. The campaigns likely originate from a single threat actor group using similar infrastructure and tactics. Despite the use of generative AI, traditional investigative techniques remain useful for identifying the hosting infrastructure. As malicious use of deepfakes increases, proactive detection and prevention efforts are crucial.",
  "published": "2024-09-02T13:47:53+00:00",
  "created_at": "2024-09-02T13:47:53+00:00",
  "modified_at": "2024-09-02T14:20:50+00:00",
  "created_at_opencti": "2024-09-02T13:47:53+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-08-29",
    "2024-09-02",
    "ai",
    "deepfakes",
    "fraud",
    "genai",
    "impersonation",
    "infrastructure analysis",
    "investment fraud",
    "phishing",
    "scams",
    "social engineering"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "https://naatuureeffocus.com/"
      },
      {
        "id": "",
        "name": "https://quontic.site/wp-content/uploads/2024/07/449030935_482215324194392_281914555774571171_n.mp4"
      },
      {
        "id": "",
        "name": "https://hybridpowerit.com/"
      },
      {
        "id": "",
        "name": "https://hemicdn.com/1501-1400-3505.mp4"
      },
      {
        "id": "",
        "name": "https://hemicdn.com/video_5848484848485.mp4"
      },
      {
        "id": "",
        "name": "https://ai-usmcollective.click/videos/TotalEnergies_news_FR.mp4"
      },
      {
        "id": "",
        "name": "https://ai-usmcollective.click/videos/USM_novosti-usmanov_UZ.mp4"
      },
      {
        "id": "",
        "name": "https://ai-usmcollective.click/videos/MexicanPartnership_man_MX.mp4"
      },
      {
        "id": "",
        "name": "https://ai-usmcollective.click/videos/FinInvest_woman-performing_IT.mp4"
      },
      {
        "id": "",
        "name": "https://ai-usmcollective.click/videos/ImmediateMatrix-PNewsQZ-Invest.mp4"
      },
      {
        "id": "",
        "name": "http://patriotsmaga2024.com/wp/2024/04/09/statement-from-president-trump-9th-of-april-2024/?1717411716131"
      },
      {
        "id": "",
        "name": "xtradgpt.online"
      },
      {
        "id": "",
        "name": "wztnb.shop"
      },
      {
        "id": "",
        "name": "wizardstarsreo.pro"
      },
      {
        "id": "",
        "name": "wizardstarsrek.pro"
      },
      {
        "id": "",
        "name": "wizardstarsreb.pro"
      },
      {
        "id": "",
        "name": "wizardstarsrea.pro"
      },
      {
        "id": "",
        "name": "wizardstar-srey.xyz"
      },
      {
        "id": "",
        "name": "wizardstar-sren.pro"
      },
      {
        "id": "",
        "name": "wizardstar-srej.pro"
      },
      {
        "id": "",
        "name": "wizardstar-sree.xyz"
      },
      {
        "id": "",
        "name": "wizardstar-sred.xyz"
      },
      {
        "id": "",
        "name": "wizardstar-srea.xyz"
      },
      {
        "id": "",
        "name": "whitesphereworldjoyful.world"
      },
      {
        "id": "",
        "name": "voidrover-hjsi.xyz"
      },
      {
        "id": "",
        "name": "untamedal.top"
      },
      {
        "id": "",
        "name": "unityventurehub.space"
      },
      {
        "id": "",
        "name": "ultravirilehemer.com"
      },
      {
        "id": "",
        "name": "tulalavno.store"
      },
      {
        "id": "",
        "name": "treewavet.world"
      },
      {
        "id": "",
        "name": "thequantumai.org"
      },
      {
        "id": "",
        "name": "testdomaintest.site"
      },
      {
        "id": "",
        "name": "techverseasx.world"
      },
      {
        "id": "",
        "name": "techmerge-ai.space"
      },
      {
        "id": "",
        "name": "systemainegotiator.shop"
      },
      {
        "id": "",
        "name": "systemaigroundwork.shop"
      },
      {
        "id": "",
        "name": "systemaibasis.top"
      },
      {
        "id": "",
        "name": "systemaibarricade.shop"
      },
      {
        "id": "",
        "name": "sweetchaseonly.click"
      },
      {
        "id": "",
        "name": "swapfavour.com"
      },
      {
        "id": "",
        "name": "subterrasphere.world"
      },
      {
        "id": "",
        "name": "subsidystart.shop"
      },
      {
        "id": "",
        "name": "stockainet.site"
      },
      {
        "id": "",
        "name": "stakspat.site"
      },
      {
        "id": "",
        "name": "st-twp.cloud"
      },
      {
        "id": "",
        "name": "sskkilfulinnvestoor.site"
      },
      {
        "id": "",
        "name": "srkgjh.top"
      },
      {
        "id": "",
        "name": "spikemaster-rj.cloud"
      },
      {
        "id": "",
        "name": "spikemaster-ra.cloud"
      },
      {
        "id": "",
        "name": "spacemome.online"
      },
      {
        "id": "",
        "name": "silvermaster-gtj.cloud"
      },
      {
        "id": "",
        "name": "safegroup.shop"
      },
      {
        "id": "",
        "name": "sacvenih.sbs"
      },
      {
        "id": "",
        "name": "rwtfoa-hpl.cloud"
      },
      {
        "id": "",
        "name": "rondeliercore.com"
      },
      {
        "id": "",
        "name": "riseanalyze.click"
      },
      {
        "id": "",
        "name": "rockriddle.world"
      },
      {
        "id": "",
        "name": "ricegoodniceproas.world"
      },
      {
        "id": "",
        "name": "restigood-oo.cloud"
      },
      {
        "id": "",
        "name": "redwoodrest.world"
      },
      {
        "id": "",
        "name": "quontic.site"
      },
      {
        "id": "",
        "name": "qvantum-ai.tech"
      },
      {
        "id": "",
        "name": "quantumal.xyz"
      },
      {
        "id": "",
        "name": "quantum-ai.link"
      },
      {
        "id": "",
        "name": "quantumai.tools"
      },
      {
        "id": "",
        "name": "qatuk.org"
      },
      {
        "id": "",
        "name": "pro-fitters.store"
      },
      {
        "id": "",
        "name": "prevaczcgv.site"
      },
      {
        "id": "",
        "name": "pinkwheels-rb.cloud"
      },
      {
        "id": "",
        "name": "peerfeectwall.online"
      },
      {
        "id": "",
        "name": "pinkwheels-ra.cloud"
      },
      {
        "id": "",
        "name": "patriotsmaga2024.com"
      },
      {
        "id": "",
        "name": "owrsasd-tf.cloud"
      },
      {
        "id": "",
        "name": "passionquantum.shop"
      },
      {
        "id": "",
        "name": "outlayquantum.shop"
      },
      {
        "id": "",
        "name": "originalquantum.shop"
      },
      {
        "id": "",
        "name": "oakcloudhi-erg.world"
      },
      {
        "id": "",
        "name": "oakcloudhi-ere.world"
      },
      {
        "id": "",
        "name": "njecil.top"
      },
      {
        "id": "",
        "name": "newglowhideout.pro"
      },
      {
        "id": "",
        "name": "newforestjoyzonega.world"
      },
      {
        "id": "",
        "name": "naatuureeffocus.com"
      },
      {
        "id": "",
        "name": "milfarka.store"
      },
      {
        "id": "",
        "name": "metawings.top"
      },
      {
        "id": "",
        "name": "maplegateu-yj.xyz"
      },
      {
        "id": "",
        "name": "lsuhhf.top"
      },
      {
        "id": "",
        "name": "lozlas-tc.cloud"
      },
      {
        "id": "",
        "name": "lozlas-ta.cloud"
      },
      {
        "id": "",
        "name": "lozlas-tb.cloud"
      },
      {
        "id": "",
        "name": "liketechnewgateq.world"
      },
      {
        "id": "",
        "name": "lartons.top"
      },
      {
        "id": "",
        "name": "kuvukye.space"
      },
      {
        "id": "",
        "name": "kurtilast.top"
      },
      {
        "id": "",
        "name": "kevxk.top"
      },
      {
        "id": "",
        "name": "juoguquda.com"
      },
      {
        "id": "",
        "name": "jetshow-qi.cloud"
      },
      {
        "id": "",
        "name": "investseries.shop"
      },
      {
        "id": "",
        "name": "investfortification.shop"
      },
      {
        "id": "",
        "name": "investcontribution.top"
      },
      {
        "id": "",
        "name": "invest-toolrealm.shop"
      },
      {
        "id": "",
        "name": "invest-toolavenue.shop"
      },
      {
        "id": "",
        "name": "inv-platform2024.site"
      },
      {
        "id": "",
        "name": "infosysdata.store"
      },
      {
        "id": "",
        "name": "individualestablish.top"
      },
      {
        "id": "",
        "name": "illjp4xty.sbs"
      },
      {
        "id": "",
        "name": "illjp4gpz.sbs"
      },
      {
        "id": "",
        "name": "iaqa.life"
      },
      {
        "id": "",
        "name": "hybridpowerit.com"
      },
      {
        "id": "",
        "name": "hugeproject.shop"
      },
      {
        "id": "",
        "name": "huerwlleiss-herton.pro"
      },
      {
        "id": "",
        "name": "higheststudy.click"
      },
      {
        "id": "",
        "name": "hotelierjobz.com"
      },
      {
        "id": "",
        "name": "hideoutglownew.pro"
      },
      {
        "id": "",
        "name": "hemicdn.com"
      },
      {
        "id": "",
        "name": "gtopinvestigate.shop"
      },
      {
        "id": "",
        "name": "gtriotit-wqm.site"
      },
      {
        "id": "",
        "name": "gsystemaiside.shop"
      },
      {
        "id": "",
        "name": "gsystemainegotiator.shop"
      },
      {
        "id": "",
        "name": "gsystemaigroundwork.shop"
      },
      {
        "id": "",
        "name": "gsystemaifence.top"
      },
      {
        "id": "",
        "name": "gsystemaifence.shop"
      },
      {
        "id": "",
        "name": "gsystemaiboundary.top"
      },
      {
        "id": "",
        "name": "gsystemaiboundary.shop"
      },
      {
        "id": "",
        "name": "gsystemaibasis.shop"
      },
      {
        "id": "",
        "name": "gsystemaibarricade.top"
      },
      {
        "id": "",
        "name": "gsurprisingai.top"
      },
      {
        "id": "",
        "name": "gsubsidystart.shop"
      },
      {
        "id": "",
        "name": "gsplendidai.top"
      },
      {
        "id": "",
        "name": "gscarceai.top"
      },
      {
        "id": "",
        "name": "grrandventure.site"
      },
      {
        "id": "",
        "name": "growthwall.click"
      },
      {
        "id": "",
        "name": "growthventure.click"
      },
      {
        "id": "",
        "name": "groundbreakinginitiative.top"
      },
      {
        "id": "",
        "name": "grottostones-gl.cloud"
      },
      {
        "id": "",
        "name": "greenrealm.world"
      },
      {
        "id": "",
        "name": "goriginatestart.shop"
      },
      {
        "id": "",
        "name": "gravetechno-jy.cloud"
      },
      {
        "id": "",
        "name": "goldzonexa.world"
      },
      {
        "id": "",
        "name": "globalpolytr.world"
      },
      {
        "id": "",
        "name": "gnetworkstart.click"
      },
      {
        "id": "",
        "name": "globalpolytechasd.world"
      },
      {
        "id": "",
        "name": "globalmastersilvernew.world"
      },
      {
        "id": "",
        "name": "ginvestwell-being.shop"
      },
      {
        "id": "",
        "name": "ginvestprecaution.shop"
      },
      {
        "id": "",
        "name": "ginvestingstart.shop"
      },
      {
        "id": "",
        "name": "ginvestguard.shop"
      },
      {
        "id": "",
        "name": "ginvestfortification.shop"
      },
      {
        "id": "",
        "name": "ginstitutestart.shop"
      },
      {
        "id": "",
        "name": "ginnspiringdefense.site"
      },
      {
        "id": "",
        "name": "gimportantinternational.club"
      },
      {
        "id": "",
        "name": "gincompleteuniversal.top"
      },
      {
        "id": "",
        "name": "gimmenseinitiative.top"
      },
      {
        "id": "",
        "name": "ghighestrisk.top"
      },
      {
        "id": "",
        "name": "gharmoniousundertaking.top"
      },
      {
        "id": "",
        "name": "ggrrandventure.fun"
      },
      {
        "id": "",
        "name": "ggrrandventure.site"
      },
      {
        "id": "",
        "name": "ggroundworkband.shop"
      },
      {
        "id": "",
        "name": "ggiftedcollective.top"
      },
      {
        "id": "",
        "name": "ggenniusprrojecct.site"
      },
      {
        "id": "",
        "name": "gfnuw.top"
      },
      {
        "id": "",
        "name": "gfinancingstart.shop"
      },
      {
        "id": "",
        "name": "gexxclusivefoundation.space"
      },
      {
        "id": "",
        "name": "gexhilaratingcontribution.club"
      },
      {
        "id": "",
        "name": "gexceptionalmodule.top"
      },
      {
        "id": "",
        "name": "genergyemporium.store"
      },
      {
        "id": "",
        "name": "geffortlesslegalentity.top"
      },
      {
        "id": "",
        "name": "gdrivenfacilitator.top"
      },
      {
        "id": "",
        "name": "gcoinundertaking.top"
      },
      {
        "id": "",
        "name": "gcoinundertaking.shop"
      },
      {
        "id": "",
        "name": "gcoinside.top"
      },
      {
        "id": "",
        "name": "gcoinreliance.shop"
      },
      {
        "id": "",
        "name": "gcoinpartition.top"
      },
      {
        "id": "",
        "name": "gcoinmedium.top"
      },
      {
        "id": "",
        "name": "gcoingathering.shop"
      },
      {
        "id": "",
        "name": "gcoininitiative.shop"
      },
      {
        "id": "",
        "name": "gcoingamble.top"
      },
      {
        "id": "",
        "name": "gcoinfinancier.shop"
      },
      {
        "id": "",
        "name": "gcoindependence.shop"
      },
      {
        "id": "",
        "name": "gcoincredit.shop"
      },
      {
        "id": "",
        "name": "gcoincommunity.shop"
      },
      {
        "id": "",
        "name": "gcoincommunity.top"
      },
      {
        "id": "",
        "name": "gcoincommunicate.shop"
      },
      {
        "id": "",
        "name": "gcoincollective.shop"
      },
      {
        "id": "",
        "name": "gcoincapitalist.top"
      },
      {
        "id": "",
        "name": "gcoinbarrier.top"
      },
      {
        "id": "",
        "name": "gcoinband.top"
      },
      {
        "id": "",
        "name": "gcoinassurance.shop"
      },
      {
        "id": "",
        "name": "gcoinangelinvestor.top"
      },
      {
        "id": "",
        "name": "gcoinalwidespread.top"
      },
      {
        "id": "",
        "name": "gcoinalwell-being.shop"
      },
      {
        "id": "",
        "name": "gcoinaluniversal.top"
      },
      {
        "id": "",
        "name": "gcoinaltask.top"
      },
      {
        "id": "",
        "name": "gcoinalscheme.top"
      },
      {
        "id": "",
        "name": "gcoinalschedule.top"
      },
      {
        "id": "",
        "name": "gcoinalsafetynet.shop"
      },
      {
        "id": "",
        "name": "gcoinalsafetynet.top"
      },
      {
        "id": "",
        "name": "gcoinalsafeguarding.top"
      },
      {
        "id": "",
        "name": "gcoinalrisk.top"
      },
      {
        "id": "",
        "name": "gcoinalprecaution.top"
      },
      {
        "id": "",
        "name": "gcoinalinternational.shop"
      }
    ],
    "attack_patterns": [
      {
        "id": "75702b35-b790-4504-a1e0-7829e76f22e9",
        "name": "T1585"
      },
      {
        "id": "2969e5a7-1049-4df8-b1ba-8a0675de6b94",
        "name": "T1589"
      },
      {
        "id": "6babd5aa-5112-4f14-a660-60d756a65d6d",
        "name": "T1586"
      },
      {
        "id": "7616ff60-a18f-4663-9824-b889aa01c8ce",
        "name": "T1588"
      },
      {
        "id": "9c5a20d1-0df9-4e99-bcc5-0b731a78b5d1",
        "name": "T1608"
      },
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "29f7ff93-033b-4f8d-8691-5bcaa438c80f",
        "name": "T1592"
      },
      {
        "id": "50514c04-b3a2-4abf-a855-e3a434200c87",
        "name": "T1204"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Uzbekistan"
      },
      {
        "id": "",
        "name": "Singapore"
      },
      {
        "id": "",
        "name": "Czechia"
      },
      {
        "id": "",
        "name": "Italy"
      },
      {
        "id": "",
        "name": "Canada"
      },
      {
        "id": "",
        "name": "France"
      },
      {
        "id": "",
        "name": "Kazakhstan"
      },
      {
        "id": "",
        "name": "Mexico"
      },
      {
        "id": "",
        "name": "Energy"
      },
      {
        "id": "",
        "name": "Finance"
      },
      {
        "id": "",
        "name": "Government"
      }
    ]
  },
  "external_refs": [
    "https://unit42.paloaltonetworks.com/dynamics-of-deepfake-scams",
    "https://otx.alienvault.com/pulse/66d5de299d825d5ba3c4b82b"
  ]
}