Cybercriminals Exploit Facebook Ads and AI to Launch Sophisticated Investment Scams

A new wave of sophisticated online investment scams is making headlines as cybercriminals harness the power of Facebook advertisements and artificial intelligence to deceive unsuspecting users into parting with their money.

Two coordinated threat actor groups, known as "Reckless Rabbit" and "Ruthless Rabbit," have been identified as the primary drivers of these campaigns. Their strategy involves luring victims through sponsored Facebook ads that link to realistic-looking fake news articles. These articles often include AI-generated images and quotes from celebrities falsely endorsing the investment schemes.

Once a user clicks the link, they are redirected to phishing sites posing as legitimate investment platforms. Here, they are asked to provide personal information under the guise of creating an account. Behind the scenes, scammers use tools like ipinfo.io and ipapi.co to verify the geographic location of visitors, filtering out unwanted traffic and focusing only on target regions.

The scammers also employ Registered Domain Generation Algorithms (RDGAs) to continuously rotate domain names, making it more difficult for authorities to detect and shut down their operations. Victims who proceed far enough into the scheme often receive phone calls from fraudulent call center agents who guide them through investing—an act that actually results in their money being stolen.

The rise of these AI-powered investment scams highlights the growing need for public awareness and digital literacy. Experts warn users to be especially skeptical of online financial opportunities that appear in social media ads or include high-profile celebrity endorsements, which are often fabricated.

Authorities and cybersecurity organizations are urging individuals to verify any investment opportunity through trusted financial institutions and to report suspicious ads directly to social media platforms.

---