Experts have uncovered a new cryptocurrency scam making the rounds using a deepfake video of Tesla CEO Elon Musk.
Threat actors have created a fake cryptocurrency exchange platform called BitVex that claims investors can get up to 30% returns on their crypto deposits when, in fact, all they do is steal the money that gets deposited.
At press time, the site was still up and running, at bitvex[.]org. Explaining what makes this “exchange” different, the site says: “We provide you with the most profitable and reliable trading contracts, making daily payments on all contracts in cryptocurrency. Start trading cryptocurrencies and stablecoins today and get your first payout tomorrow.”
Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022 (opens in new tab). Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey (opens in new tab) to get the bookazine, worth $10.99/£10.99.
It also showcases testimonials from the likes of CZ (Binance founder and CEO), and Cathie Wood (founder, CEO and CIO of Ark Invest). Elon Musk was listed as CEO. To make the scam more convincing, the site also lists “profits” generated by the exchange’s “users”.
It is also being promoted with a deepfake video of Elon Musk, in which the eccentric billionaire and entrepreneur is seen discussing the business. The video does very little to add to the legitimacy of the whole ordeal, as the production of the multimedia is comically bad.
Still, the fraudsters have shared it via YouTube, meaning it can break into other people’s channels to distribute it in more places, with an Arabic gaming video channel already found to have been hijacked to promote the scam.
Proving that every job requires a bit of talent, scamming included, is the fact that the campaign brought in minimal earnings for the fraudsters. Taking a deeper look, BleepingComputer found a number of wallet addresses that the “exchange” uses, and with the exception of the Bitcoin address which, at press time, holds no more than $1.4k in the cryptocurrency, the have been no payments made.
Cryptocurrency investors are advised not to keep their coins on an exchange, but rather move them to a non-custodial wallet. Their accounts should be protected by strong passwords (opens in new tab), and security keys (opens in new tab), while their devices should be kept up to date, behind firewalls, and with a strong antivirus solution installed.