Social Engineering Scams: Crypto Fraud, Fake DEA Agents, AI Deepfakes, and Whiskey Cask Schemes

Evolving Toll Scams and Crypto Fraud

• ⚠️ Scammers are targeting phone numbers for toll scams, even if the number is no longer associated with the individual, as seen with SunPass texts sent to an old Florida number.
• 💡 Palo Alto Networks' Unit 42 uncovered a large-scale operation distributing thousands of fraudulent cryptocurrency investment platforms via websites and mobile apps.
• 🎯 These crypto scams mimic well-known brands and offer impossibly high daily returns (e.g., 27%), primarily targeting victims in East Africa and Asia.
• 🔗 The fraudulent platforms often use domain fronting and free HTTPS certificates to obscure their origins, with domains predominantly registered in Singapore.

Government Impersonation and Gold Bar Scams

• 🚨 A 72-year-old woman was scammed out of over $480,000 by someone posing as a DEA agent, who convinced her to transfer assets to the US Treasury for safekeeping.
• 💰 The scam escalated with a second caller posing as a US Treasury case manager, coercing the victim to convert her money into gold bars.
• 🏦 Investigators arrested a 23-year-old suspect attempting to collect fake gold bars, highlighting that these scams can target anyone, regardless of their location or education.

AI-Generated Scams and Whiskey Cask Frauds

• 🤖 AI is being used to create convincing deepfake ads, such as a fake Kelly Clarkson endorsement for a weight loss product, with unnatural speech patterns being a tell-tale sign.
• 🥃 A new scam involves fraudulent whiskey cask investments, where victims are sold non-existent or overvalued casks, with one victim losing £100,000.
• 🕵️ The perpetrator of the whiskey cask scam, Craig Brooks, has a history of large-scale fraud involving carbon credits and rare earth metals.
• 📉 The BBC investigation revealed that some whiskey casks are sold multiple times or do not exist at all, preying on the perceived value and long-term nature of whiskey aging.

Phishing Attempts and Social Security Scams

• 📧 A phishing email, impersonating the Social Security Administration, urges recipients to click a link for an "important update" on their statement.
• 💻 The email advises using a desktop or laptop, suggesting it may exploit vulnerabilities specific to those platforms.
• ⚠️ The phishing attempt is characterized by repetitive messaging, a suspicious placeholder for a "trusted institution logo," and a non-official sender email address.