{"id":453150,"date":"2026-08-26T12:10:26","date_gmt":"2026-08-26T09:10:26","guid":{"rendered":"https:\/\/menatech.net\/en\/?p=453150"},"modified":"2026-08-26T12:10:26","modified_gmt":"2026-08-26T09:10:26","slug":"deepfake-trap-group-ib-warns-gulf-investors-over-whatsapp-crypto-stock-scams","status":"publish","type":"post","link":"https:\/\/menatech.net\/en\/deepfake-trap-group-ib-warns-gulf-investors-over-whatsapp-crypto-stock-scams\/","title":{"rendered":"Deepfake trap: Group-IB warns Gulf investors over WhatsApp crypto &#038; stock scams"},"content":{"rendered":"<p>Group-IB, a creator of predictive cybersecurity technologies, has issued a comprehensive security advisory targeting retail investors and financial organizations across the GCC. The warning details how two active digital investment fraud networks are deploying AI-generated deepfakes and private messaging apps to target Gulf capital markets.<\/p>\n<p>The alert stems from investigations conducted by Group-IB\u2019s META Threat Intelligence and Fraud Protection teams, which identified two core operational schemes:<\/p>\n<h3>GoldBull Scheme<\/h3>\n<p><img decoding=\"async\" class=\"aligncenter size-medium wp-image-453151 lazyload\" data-src=\"https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-700x696.png\" alt=\"\" width=\"700\" height=\"696\" data-srcset=\"https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-700x696.png 700w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-1024x1018.png 1024w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-150x150.png 150w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-768x763.png 768w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-1536x1527.png 1536w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/01-Infographic_Threat-Actor-Profile-2048x2036.png 2048w\" data-sizes=\"auto\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 700px; --smush-placeholder-aspect-ratio: 700\/696;\" data-original-sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>Leverages short-lived paid advertisements on Meta platforms featuring deepfake video and voice clones of high-profile financial professionals. Victims are lured into private WhatsApp groups and instructed to purchase specific small-cap stocks on regulated public exchanges. In one documented instance, coordinated buying drove a stock up by 12.4% before operators dumped their positions, inflicting a 42.4% loss on retail entry prices.<\/p>\n<h3>CoinLure Scheme<\/h3>\n<p><img decoding=\"async\" class=\"aligncenter size-medium wp-image-453152 lazyload\" data-src=\"https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-700x741.png\" alt=\"\" width=\"700\" height=\"741\" data-srcset=\"https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-700x741.png 700w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-967x1024.png 967w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-768x813.png 768w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-1451x1536.png 1451w, https:\/\/cdn.menatech.net\/wp-content\/uploads\/sites\/2\/2026\/08\/02-Infographic_Threat-Actor-Profile-1934x2048.png 1934w\" data-sizes=\"auto\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 700px; --smush-placeholder-aspect-ratio: 700\/741;\" data-original-sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>Manages an interconnected infrastructure of over 200 deceptive cryptocurrency investment websites. The portals present fabricated returns and exclusively accept crypto deposits. When victims attempt to withdraw funds, the operators demand secondary fees for invented taxes, compliance charges, or account upgrades.<\/p>\n<p>Group-IB highlighted several regional variables that make Gulf markets attractive to international syndicates. WhatsApp serves as the primary regional channel for business and financial conversations. Additionally, high crypto adoption rates\u2014highlighted by the UAE ranking fifth globally on the Henley Crypto Adoption Index and Saudi Arabia registering a 154% YoY surge in crypto transaction value\u2014make new retail investors prime targets for fraudsters cloning legitimate corporate licenses.<\/p>\n<p>Group-IB advises retail market participants to treat all investment leads originated via messaging platforms as fraudulent until independently verified with national regulatory authorities, urging enterprises to deploy automated digital risk monitoring to quickly take down brand-impersonating deepfakes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Group-IB, a creator of predictive cybersecurity technologies, has issued a comprehensive security advisory targeting retail investors and financial organizations across the GCC. The warning details how two active digital investment fraud networks are deploying AI-generated deepfakes and private messaging apps to target Gulf capital markets. The alert stems from investigations conducted by Group-IB\u2019s META Threat [&hellip;]<\/p>\n","protected":false},"author":257,"featured_media":453153,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"_breakdance_hide_in_design_set":false,"_breakdance_tags":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[29324],"tags":[29380,29366],"audience-intent":[],"content-types":[],"country":[],"entity":[],"persona":[],"class_list":["post-453150","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-cybersecurity","tag-mena"],"acf":[],"_links":{"self":[{"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/posts\/453150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/users\/257"}],"replies":[{"embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/comments?post=453150"}],"version-history":[{"count":0,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/posts\/453150\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/media\/453153"}],"wp:attachment":[{"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/media?parent=453150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/categories?post=453150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/tags?post=453150"},{"taxonomy":"audience-intent","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/audience-intent?post=453150"},{"taxonomy":"content-types","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/content-types?post=453150"},{"taxonomy":"country","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/country?post=453150"},{"taxonomy":"entity","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/entity?post=453150"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/format?post=453150"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/menatech.net\/en\/wp-json\/wp\/v2\/persona?post=453150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}