Deepfake-aided investment scam on X targets Romanian users
Romania's cybersecurity authority warned of investment fraud using deepfake technology to impersonate celebrities on X, directing victims to phishing sites that steal personal and financial data. Attackers use compromised accounts to post sponsored content with altered images and redirect users to fake platforms where initial deposits are stolen.
What happened
Cybercriminals are using sponsored posts on X to promote false investment opportunities, exploiting images of Romanian celebrities and public figures using deepfake technology, according to warnings from Romania's National Cybersecurity Directorate (DNSC).
Attackers use apparently legitimate accounts, likely compromised, to publish sponsored posts containing altered images with false messages in which public figures 'promote' 'safe and rapid' investment opportunities. The links in these posts lead to phishing pages imitating trusted financial sources, where users are prompted to enter personal and financial data and make initial deposits that go directly to attackers' accounts.
Reported impact
DNSC warned Romanian users of X to be alert to the scam, recommending they verify account authenticity, be skeptical of celebrity endorsements in images and videos, avoid clicking links promising rapid enrichment, and seek information from trusted sources.
Index analysis
The scam exploits deepfake technology to impersonate public figures and combines this with compromised accounts and phishing techniques. DNSC advised users that if they have already provided financial data, they should urgently contact their bank to block transactions and file a complaint with Romanian Police and notify DNSC.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.