This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Researchers tracked a large AI-themed investment scam campaign involving more than 15,000 domains that used cloaking and deepfakes to hide from security tools while targeting ordinary users with fraudulent trading platforms.
Researchers from Infoblox and Confiant tracked a massive investment scam campaign involving more than 15,000 domains over a four-month period starting October 1, 2025. Criminals abused the Keitaro ad-tracking platform as part of a cloaking system to hide scam content from security scanners while showing it to real victims. The scam sites typically promised 'Smart AI Trading Technology' or 'Intelligent Trading Solutions' with consistently high returns, often using deepfake images, fabricated media, and fake interviews with well-known public figures to appear credible. The operation used compromised websites, spam emails, social media posts, and online ads to drive traffic through the same tracking infrastructure. When visitors clicked links, a traffic distribution system checked their country, device, browser, and other factors to determine if they matched an 'ideal victim' profile before showing them the real investment scam landing page. Security researchers, ad platform reviewers, and automated scanners were instead shown benign pages like generic blogs. The campaign included multiple threat actors using AI-generated content, deepfake videos of news anchors, and fake news articles to promote fraudulent cryptocurrency platforms and trading schemes targeting various countries including the United States, European nations, Canada, and Japan.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
No population impact data reported.
