The National Cyber ​​Security Agency (DNSC) announces that it has observed the emergence of sponsored accounts and videos on social media in recent days promoting fraud attempts. In fact, these new scams have been circulating for weeks and include the names of major companies.

False advertisingPhoto: DNSC

How people are deceived

The method is quite simple and effective for attackers, DNSC says, and is already widely used on #Meta platforms. Cybercriminals create Google (Youtube) accounts where they post information and visuals that are designed to mislead the user.

DNSC gives the example of an account created at the end of September, which “masks” as a Transgaz company and promotes false advertising, offering unrealistic get-rich-quick opportunities through investments that will be supported by the company in question and the Romanian government. The clip also borrows the B1.tv logo to increase credibility with the audience.

Other names are also used, such as Hidroelectrica or Enel.

Additionally, these clips, created (most likely) by a text-to-speech solution, attempt to convince users to go to a phishing site and enter personal, credential, or financial information

DNSC already issued an alert about this attack method in September: https://www.dnsc.ro/…/alerta-tentative-de-frauda…

Guidelines and where to report these scams

  • Carefully analyze the information collected from the online environment
  • Avoid clicking on links from such sponsored posts that offer get-rich-quick opportunities
  • Report such scam posts on social media
  • Do not submit your subscription details to such scams
  • Always check the website of the ASF – the Financial Supervisory Authority – for information about possible funds aimed at deceiving investors or about unauthorized or unreliable funds
  • If you have entered card details or authentication details into your online banking accounts, notify the bank immediately, and if you have been harmed by this method, file a complaint with the Romanian police, either in person or online
  • If you notice similar initiatives on the Internet, report them as FRAUD on the social network and DNSC ([email protected] or 1911)