Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media

Published:

24 december 2025 om 13:08:00

Alert date:

24 december 2025 om 14:02:17

Source:

thehackernews.com

Web Technologies, Emerging Technologies

The Nomani investment scam has increased by 62% according to ESET data, expanding beyond Facebook to other social media platforms including YouTube. The fraudulent scheme uses AI deepfake advertisements to target victims on social media. ESET blocked over 64,000 unique URLs associated with this threat in the current year. The campaign represents a significant surge in AI-powered financial fraud targeting social media users through sophisticated deepfake technology.

Technical details

The Nomani investment scam has increased by 62% and expanded beyond Facebook to YouTube. ESET blocked over 64,000 unique URLs associated with the threat. The scam uses AI-powered deepfake video testimonials with improved quality, higher resolution, reduced unnatural movements, and better A/V synchronization. Attackers run malicious ads for only a few hours to avoid platform detection, use benign cloaking pages for users who don't meet targeting criteria, and abuse legitimate social media ad framework tools like forms and surveys instead of external webpages. The scammers use AI tools to generate HTML code for phishing page templates, with evidence of AI-generated comments containing checkboxes in source code. GitHub repositories hosting these templates are associated with Russian and/or Ukrainian users.

Mitigation steps:

Be cautious of investment opportunities advertised on social media platforms, especially those featuring video testimonials from celebrities or public figures. Verify the legitimacy of investment platforms independently before providing personal information or funds. Be aware of follow-up scams claiming to help recover lost funds using fake Europol/INTERPOL lures. Report suspicious investment ads to the social media platforms.

Affected products:

Facebook
YouTube
Meta advertising platform