Singapore officials impersonation scam campaign using verified Google Ads
Campaign
Summary
Hide ▲
Show ▼
A Singapore officials impersonation scam campaign using verified Google Ads and deepfake videos is now exposed, and it has already steered Singapore residents toward a fraudulent investment platform. The operation’s local-IP targeting and redirect chains made the fraud harder to spot and increased the risk of financial loss.
Related Happenings
FBI public service announcement on fake FIFA websites
Public Sector Action
First: 28.05.2026 22:08
Last: 28.05.2026 22:08
Sources 1
About this happening:
The **FBI** warned on **May 28, 2026** that fake **FIFA** websites are being used to steal data and sell fraudulent tickets and hospitality packages ahead of the **2026 World Cup*...
FBI public service announcement on fake FIFA websites
Public Sector ActionAbout this happening: The **FBI** warned on **May 28, 2026** that fake **FIFA** websites are being used to steal data and sell fraudulent tickets and hospitality packages ahead of the **2026 World Cup*...
Ghost Stadium FIFA World Cup fraud campaign
Campaign
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is using **hundreds of phishing sites** and cloned **fifa.com** pages to target **2026 FIFA World Cup** fans with...
Ghost Stadium FIFA World Cup fraud campaign
CampaignAbout this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is using **hundreds of phishing sites** and cloned **fifa.com** pages to target **2026 FIFA World Cup** fans with...
Triad Nexus expands fraud ecosystem and shifts into emerging markets after 2025 US sanctions
Threat Actor Meta
First: 14.04.2026 15:00
Last: 14.04.2026 15:00
Sources 1
About this happening:
**Triad Nexus** expanded its fraud ecosystem after **US Treasury sanctions in 2025**, increasing operational scale and shifting into **emerging markets**. The network’s use of **U...
Triad Nexus expands fraud ecosystem and shifts into emerging markets after 2025 US sanctions
Threat Actor MetaAbout this happening: **Triad Nexus** expanded its fraud ecosystem after **US Treasury sanctions in 2025**, increasing operational scale and shifting into **emerging markets**. The network’s use of **U...
Peru loan phishing campaign impersonating financial institutions across Latin America
Campaign
First: 21.01.2026 17:00
Last: 21.01.2026 17:00
Sources 1
About this happening:
A **Peru-focused loan phishing campaign** has expanded across **Latin America**, putting users' **card numbers**, **PIN codes**, and **banking credentials** at risk. The operation...
Peru loan phishing campaign impersonating financial institutions across Latin America
CampaignAbout this happening: A **Peru-focused loan phishing campaign** has expanded across **Latin America**, putting users' **card numbers**, **PIN codes**, and **banking credentials** at risk. The operation...
Record crypto-fraud losses rise with AI-driven impersonation
Trend
First: 14.01.2026 12:00
Last: 14.01.2026 12:00
Sources 1
About this happening:
**Cryptocurrency fraud** is surging as scammers use **AI chatbots** and **brand impersonation** to widen victim reach and raise payout sizes. A **Malwarebytes Labs** analysis foun...
Record crypto-fraud losses rise with AI-driven impersonation
TrendAbout this happening: **Cryptocurrency fraud** is surging as scammers use **AI chatbots** and **brand impersonation** to widen victim reach and raise payout sizes. A **Malwarebytes Labs** analysis foun...
Timeline
-
21.10.2025 18:00 2 articles · 7mo ago
Group-IB exposes Singapore officials impersonation scam campaign
Initial DisclosureGroup-IB exposed a campaign impersonating Singapore prime minister Lawrence Wong and coordinating minister for national security K Shanmugam by using verified Google Ads, redirect chains, fake CNA and Yahoo! News pages, and deepfake videos to steer Singapore residents to a Mauritius-registered forex investment platform. Investigators identified 28 verified advertiser accounts, 52 intermediary domains and 119 malicious domains, and estimated that 3,808 Singaporeans clicked the malicious ads last month while 685 were redirected to scam sites.
Show sources
- Singapore Officials Impersonated in Sophisticated Investment Scam — www.infosecurity-magazine.com — 21.10.2025 18:00
- Singapore Officials Impersonated in Sophisticated Investment Scam — www.infosecurity-magazine.com — 21.10.2025 18:00