Loading story…
Cybercriminals are increasingly exploiting social media and video platforms such as Facebook and YouTube to distribute scam advertisements, deepfakes, and malware. Former Meta executives have launched a nonprofit initiative to address the growing lack of transparency and stagnation in anti-scam ad technology, highlighting the persistent evolution of scam tactics and the use of AI to create convincing fraudulent content. Meanwhile, YouTube faces a surge in scams and malware campaigns, with attackers leveraging the platform’s recommendation algorithms, hijacked accounts, and AI-generated videos to reach wide audiences. Notable operations include the "YouTube Ghost Network," which used thousands of videos on compromised channels to lure users into downloading malware or visiting phishing sites, and scams that migrated from Facebook Ads to YouTube and Google Ads, exploiting trusted brands and hijacked ad accounts.
The sophistication of these scams is amplified by the use of deepfakes and synthetic identities, making it increasingly difficult for both users and traditional moderation systems to detect fraudulent activity. Security researchers emphasize the need for advanced detection technologies, such as light spectrum analysis and cryptographic verification, to combat these threats. The ongoing arms race between scammers and platform defenders underscores the urgent need for industry-wide improvements in transparency, technology investment, and layered verification standards to restore trust in online advertising and content platforms.
Get the infrastructure and lures behind it.
4 events from the most recent confirmed update back to the earliest known activity.
A group of former Meta employees publicly proposed a response to the growing flood of scam advertisements across social media platforms, reflecting broader industry efforts to address large-scale ad-enabled fraud.
By early November 2025, security experts were urging a zero-trust approach to online content and UK regulatory pressure was increasing to hold YouTube advertising to stricter standards amid rising scam activity.
Attackers used AI-generated deepfake videos impersonating figures such as Elon Musk and Jensen Huang to promote cryptocurrency scams on YouTube, showing the growing use of synthetic media in fraud.
A campaign dubbed the 'YouTube Ghost Network' used more than 3,000 YouTube videos to distribute malware, illustrating how attackers exploited the platform at scale for cybercrime.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
3 references tracked. Mallory keeps watching after this page renders.
wired.com
Open sourcehelpnetsecurity.com
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Media Trust’s *Global Report on Digital Trust, Ad Integrity, and the Protection of People* warns that **malvertising** is increasingly delivered through the same infrastructure used for legitimate online advertising, with scam campaigns, malicious redirects, and malware distribution blending into normal marketing traffic. The report estimates combined US consumer and business losses tied to malware, scams, and ad-borne fraud exceeded **$12.5B in 2025**, and notes broad exposure, with **7 in 10 adults** reporting a digital scam or phishing attempt in the prior 12 months. Reporting on the same findings, Business Insider said **programmatic advertising** overtook email scams and direct hacks as the primary malware channel in 2025, with advertising accounting for **60%+** of observed malware and phishing campaigns and year-over-year growth in programmatic-delivered malware of roughly **45%** (with Help Net Security citing a **42%** malvertising increase). The report highlights how the scale of automated ad buying and the expanding adtech supply chain allow a compromised creative or redirect script to propagate widely across websites, apps, streaming/connected TV, and other channels, while **AI-generated content** is increasingly used for brand impersonation and deceptive ads (including deepfake-style lures).
Jun 29, 2026
Security researchers have identified a surge in malicious applications and scams leveraging the branding of popular AI platforms such as ChatGPT, DALL·E, and WhatsApp to deceive users, particularly in the United States. Investigations revealed that some of these apps, available on third-party app stores, masquerade as legitimate AI tools but are in fact either adware or full-fledged spyware. For example, a fake DALL·E 3 app was found to display only advertisements while pretending to generate images, and a counterfeit WhatsApp Plus app operated as spyware, harvesting sensitive data including contacts, SMS, and device accounts, enabling identity theft and financial fraud. These findings highlight the growing risk of users being tricked into installing harmful software under the guise of trusted AI brands. In a related incident, a deepfake video of Nvidia CEO Jensen Huang was used to promote a cryptocurrency scam during a fake Nvidia GTC keynote stream on YouTube. The AI-generated hoax attracted nearly 100,000 viewers, significantly outpacing the legitimate event, and was even promoted above the official stream in search results. This demonstrates the increasing sophistication and reach of AI-powered scams, where attackers exploit both the popularity of AI brands and the capabilities of generative AI to create convincing fraudulent content, posing significant risks to user privacy, financial security, and trust in digital platforms.
Jun 29, 2026
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026