Dangerous Trend in Social Media: Fraud Through Fake Executive Profiles
Fraud attempts in the form of spam emails are a daily occurrence for many people, but social media is also increasingly targeted by cybercriminals. A particularly insidious threat comes from a trend that has been observed more frequently in recent times: deliberately created fake profiles of company executives on Facebook, Instagram, and LinkedIn.
TL;DR
- Fake profiles of executives: Cybercriminals create fake social media profiles of CEOs and managers.
- Exploiting trust: These fake profiles are used to contact and defraud employees, customers, and partners.
- LinkedIn particularly affected: The business platform offers ideal conditions for professionally appearing fake profiles.
- AI exacerbates the problem: GenAI can generate convincing profile pictures and text.
- Reporting is mandatory: Suspicious accounts should be reported to platform operators and internal security officers.
This scheme can be very lucrative for the fraudsters: They can steal sensitive data and make enormous profits through extortion or selling this information. That senior employees and public figures are preferred targets for attackers is not solely due to the high potential value of the loot. Criminals can exploit the fame and status of a target person to deceive unsuspecting users. If these users interact with the fake profile, the fraudsters often succeed in manipulating their victims to reveal trade secrets, personal data, or even money.
How the fraud scheme works
By imitating an executive, attackers often can contact potential business partners or employees of the senior executive directly without raising suspicion. They try to build trust and get victims to disclose information or even transfer money. An advantage of this approach: Unlike other cyberattacks, the cybercriminals usually do not have to overcome security mechanisms such as firewalls, spam filters, and antivirus programs. They exploit the fact that social media enables quick and easy contact. If the deception is successful, they now have the opportunity to receive data and resources directly from the victim.
Facebook and Instagram in the crosshairs
An analysis of data from more than 1,000 fake executive profiles on Facebook, Instagram, Twitter, and LinkedIn shows which platforms are particularly at risk:
