LIVE · cybersecurity feed
Live wire
security

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

The FBI has issued a public service announcement warning about an advanced scam campaign that uses deepfake videos of senior FBI officials and sophisticated spoofed websites to defraud individuals, particularly those who have previously been victims of fraud. This new warning, released by the FBI's Internet Crime Complaint Center (IC3) on July 20, 2026, indicates a significant escalation from…

ZeroDay News ·

Source: Infosecurity Magazine

The FBI has issued a public service announcement warning about an advanced scam campaign that uses deepfake videos of senior FBI officials and sophisticated spoofed websites to defraud individuals, particularly those who have previously been victims of fraud. This new warning, released by the FBI's Internet Crime Complaint Center (IC3) on July 20, 2026, indicates a significant escalation from a similar scheme first reported in April 2025.

The current campaign is described as materially more refined, moving beyond simple text-based recovery pitches to mimic official government processes comprehensively. Scammers are combining social media impersonation, generative AI video technology, and highly convincing lookalike complaint portals to create a coordinated attack.

In one observed variant, a fraud victim who had mentioned filing an IC3 complaint was contacted via Facebook Messenger by someone impersonating an FBI agent. This imposter provided a link, ostensibly to update the victim's report. The link either contained malicious code designed to compromise the user's system or was used to harvest additional financial details.

A key element of this escalated campaign involves the use of AI-generated videos of a senior FBI leader hosted on social media platforms. These deepfake videos encourage users to file complaints on a fraudulent IC3 website. The fake portal closely mimics the legitimate ic3.gov site but simplifies the complaint process to a single form requesting basic information such as name, phone number, email, the type of scam, and an estimated financial loss. After submission, the site issues a reference number and promises follow-up, at which point the operators collect further personal data.

Experts note that messages appearing to originate from the FBI carry substantial weight in a phishing context, potentially leading victims to bypass standard verification procedures and share sensitive information like credentials, financial records, or internal details. This tactic mirrors deepfake trading-platform scams documented in May 2025, which also leveraged AI-generated videos of public figures to direct victims to fraudulent sites.

The FBI also confirmed that AI video is being used in live calls to impersonate executives or officials. To help users identify these deepfakes, the Bureau advises looking for visual anomalies such as distorted hands, unrealistic accessories, inaccurate shadows, and noticeable lag in voice calls.

The IC3 explicitly states that it does not maintain a social media presence, does not communicate through platforms like Facebook or Telegram, does not use phone calls or public forums for official communication, and never requests payment for the recovery of lost funds. The FBI strongly urges individuals to directly type "ic3.gov" into their browser's address bar, to avoid clicking on sponsored search results, and to always verify that any IC3 URL ends with a ".gov" domain to ensure authenticity.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.