{"id":10577,"date":"2024-09-18T09:00:12","date_gmt":"2024-09-18T16:00:12","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=10577"},"modified":"2024-09-18T09:08:51","modified_gmt":"2024-09-18T16:08:51","slug":"no-elon-musk-was-not-in-the-us-presidential-debate","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/","title":{"rendered":"No, Elon Musk was not in the U.S. Presidential Debate"},"content":{"rendered":"<p>Cybercriminals jumped at the opportunity last week to use the U.S. presidential debate as fodder for a new cryptocurrency scam. Victims were lured by deep fake videos claiming to show Elon Musk joining Donald Trump in a \u201cfiery\u201d debate against Kamala Harris.  Unfortunately for viewers who tuned in to see Musk and Trump team up against Harris, the streamed session started with Musk saying that Trump could not join him because he is occupied with the Harris debate. After that, the video turns to the theme of cryptocurrency and tells viewers that they could win big by investing in cryptocurrency during the streamed event.  <\/p>\n<p>Infoblox first reported this campaign in a <a href=\"https:\/\/infosec.exchange\/@InfobloxThreatIntel\/113136437862864782\" rel=\"noopener\" target=\"_blank\">Mastodon post<\/a> shortly after it began. The videos were streamed from well-established YouTube accounts, some with over 2.4M subscribers, and at one point on Saturday, we saw over 184k accounts watching one of the videos live. The videos contained QR codes linked to domains that are made to look like the candidates or cryptocurrency platforms, adding further deception. All of this demonstrates how criminals take advantage of high-profile current events, social media, and artificial intelligence (AI) to make money. While YouTube took down account after account, some videos were available for over 12 hours, tricking an untold number of users. But by blocking access to suspicious domains, users can be protected from these clever scams.  <\/p>\n<p><img decoding=\"async\" src=\"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure.png\" alt=\"\" class=\"aligncenter size-full\" \/><\/p>\n<p>While <a href=\"https:\/\/blogs.infoblox.com\/threat-intelligence\/infoblox-researchers-uncover-malicious-domains-hosting-cryptocurrency-scams\/\" rel=\"noopener\" target=\"_blank\">Infoblox<\/a> and other researchers from <a href=\"https:\/\/labs.guard.io\/streamjacking-hijacking-hundreds-of-youtube-channels-per-day-propagating-elon-musk-branded-730944bbbfe6\" rel=\"noopener\" target=\"_blank\">Guardio<\/a> and <a href=\"https:\/\/www.bitdefender.com\/blog\/labs\/a-deep-dive-into-stream-jacking-attacks-on-youtube-and-why-theyre-so-popular\/\" rel=\"noopener\" target=\"_blank\">BitDefender<\/a> have reported on the use of hijacked YouTube channels to advertise crypto-currency scams in the past, this campaign differs in that the actors behind it attempt to leverage current events, namely the presidential debate, to get their videos close to the top of search results. In January 2024, <a href=\"https:\/\/www.bitdefender.com\/blog\/labs\/a-deep-dive-into-stream-jacking-attacks-on-youtube-and-why-theyre-so-popular\/\" rel=\"noopener\" target=\"_blank\">BitDefender<\/a> was one of the first to report on the use of deep fake technology to alter existing videos to include content that promotes the scams and to add legitimacy, but the content was not related to a specific event. As press around the debate faded, these actors took advantage of the news cycle with videos this week entitled \u201c<a href=\"https:\/\/youtu.be\/lPq0i6DQZhM\" rel=\"noopener\" target=\"_blank\">Elon Musk Reveals Insights on Trump Assassination Attempt and Election<\/a> Support.\u201d This video was also quickly taken down, but we captured a copy; view it here.<\/p>\n<p><iframe loading=\"lazy\" width=\"720\" height=\"405\" src=\"https:\/\/www.youtube.com\/embed\/lPq0i6DQZhM?si=TX4YSRwrf4yEMYmR\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<h3>Stream-jacking YouTube Channels<\/h3>\n<p>The scam starts with a hijacked YouTube channel using a process referred to as \u201c<a href=\"https:\/\/labs.guard.io\/streamjacking-hijacking-hundreds-of-youtube-channels-per-day-propagating-elon-musk-branded-730944bbbfe6\" rel=\"noopener\" target=\"_blank\">stream-jacking<\/a>.\u201d Cybercriminals choose victim channels based on the number of subscribers and views: channels that have high traffic so that their content will get the widest distribution possible before being taken down. In this campaign, once the victim channel has been hijacked, it is slowly transformed into a (fake) Tesla-branded channel. This includes changing the name and imagery of the channel and uploading numerous official Tesla videos (see Figure 1).  <\/p>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-1.png\" alt=\"Figure 1\" \/><\/p>\n<p class=\"image-caption\">Figure 1: The (fake) Tesla-branded YouTube channel https:\/\/www.youtube[.]com\/@tesla-r4i which hosts Tesla videos <\/p>\n<p>Once the re-branding of the channel is complete, the malicious content is added as a \u201clivestream\u201d to the channel (see Figures 2 and 3). However, the videos are not actually live at all. They are simply pre-recorded videos played on a loop with text overlays suggesting it is live. The \u201clivestream\u201d is repeated across multiple stream-jacked channels simultaneously and can be found using a simple search (see Figure 4). One of the streams indicated there were 184k viewers watching it. We suspect that threat actors used bot traffic to inflate the view counts to make the videos and the crypto event seem more legitimate. <\/p>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-2.png\" alt=\"Figure 2\" \/><\/p>\n<p class=\"image-caption\">Figure 2: The \u201clive\u201d stream video using a Trump-Harris debate theme on the same YouTube channel<\/p>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-3.png\" alt=\"Figure 3\" \/><\/p>\n<p class=\"image-caption\">Figure 3: A screenshot of the \u201clive\u201d YouTube stream using deep fake Elon Musk audio seen on multiple fake Tesla YouTube channels and hijacked legitimate channels <\/p>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-4.png\" alt=\"Figure 4\" \/><\/p>\n<p class=\"image-caption\">Figure 4: Search results for livestreams using the keywords \u201ctesla\u201d and \u201ctrump\u201d<\/p>\n<h3>Scam Domains <\/h3>\n<p>The livestream video prominently displays a QR code that links to the site hosting the crypto scam. The scam sites use domain names that are lookalikes to cryptocurrency sites, Tesla, and the debate, e.g., trump-debate[.]com. The domains found in this campaign all have some Russian nexus, including the use of a Russian registrar or hosting provider. While the debate-specific domains were recently registered, the cryptocurrency lookalike domains were registered some time ago, including eth23[.]io and chaindrop[.]promo.  <\/p>\n<p>The scam sites in this campaign use Cloudflare anti-bot landing pages to prohibit web scraping from crawlers operated by security researchers, from seeing the content of the sites. Once the anti-bot landing page has been bypassed and the page is loaded, potential victims see a page like that in Figure 5, wherein the subjects in the videos change from campaign to campaign. Victims are urged to link their crypto wallet to be eligible to win a prize. While the branding and content of the sites are fake, there is some real information on the site. In the presidential debate-themed campaign, victims are asked to send funds to the displayed crypto wallet addresses, which belong to the cybercriminals. In many other campaigns, the crypto wallet addresses are found hidden in JavaScript. Following the QR codes in the debate-themed livestreams, we were able to find the crypto wallet addresses shown in Table 1, one of which has gathered over $4,000 in Dogecoin transactions (see Figure 6). <\/p>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-5.png\" alt=\"Figure 5\" \/><\/p>\n<p class=\"image-caption\">Figure 5: The content of one of the crypto scam sites advertised in the livestream videos using a QR code<\/p>\n<table style=\"margin: 0 auto 30px;\">\n<thead>\n<tr>\n<th>Wallet address <\/th>\n<th>Type<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"code-format\">bc1qfwjgvwesz5k2dpjpvwueze2v009wjh76hn9gfn<\/td>\n<td>Bitcoin<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">bc1qjanjaawj4g0n5xlm03dmpx97u5yrpzljuhuxz8<\/td>\n<td>Bitcoin<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">6XxsCPnWBY4ciWhEN5P9GiTWxuDHwomQkDsHJNC7hrTf<\/td>\n<td>Solana<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">8iwdRkeBDr6RzpkvkcMzqAFqr9L9eGKCKzHHZdzB6MQx<\/td>\n<td>Solana<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">0x70c774951b96Cb7EcA192505da81CEAddf6F3C92<\/td>\n<td>Ethereum<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">0xD7C3F7dC1Dfa6F64F778ddfC9Ea1a4d2dA2131b4<\/td>\n<td>Ethereum<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">D6ShMStqVGWwgHPAZZkw9UK49oP4JZJAz4<\/td>\n<td>Dogecoin<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">DKV1nsGp6DYVZ4fze8zYJbPti9MbGcXGWB<\/td>\n<td>Dogecoin<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\">Table 1:  Cryptocurrency wallet addresses owned by the threat actor and used in the Trump-Harris presidential themed scam campaigns <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><img decoding=\"async\" class=\"blog-image\" src=\"\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-figure-6.png\" alt=\"Figure 6\" \/><\/p>\n<p class=\"image-caption\">Figure 6: One of the crypto wallets used in the debate-themed scam showing over $4,200 USD in Dogecoin transactions<\/p>\n<h3>Prevention and Mitigation <\/h3>\n<p>As cybercriminals employ new techniques and technologies such as deep fakes, the lures become more believable and the need for proactive defense becomes more important. Infoblox Threat Intel has numerous algorithms to identify suspicious and lookalike domains as they are registered or configured by cybercriminals. By leveraging DNS to protect their networks, BloxOne Threat Defense customers are protected from these and a multitude of other threats. With over 15M domains in our suspicious and malicious  blocklists, the percentage of false positives reported remains below 0.0002%, giving enterprises and end users confidence that they are protected regardless of how the domain is used.  <\/p>\n<h3>IoAs<\/h3>\n<p>The table below provides IoAs (indicators of activity) used in this campaign; for more, go to the Infoblox Threat Intelligence Github repo: https:\/\/github.com\/infobloxopen\/threat-intelligence\/tree\/main. <\/p>\n<table style=\"margin: 0 auto 30px;\">\n<thead>\n<tr>\n<th>Indicator<\/th>\n<th>Type<\/th>\n<th>Note<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@tesla.trump.debate <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@Tesla.lives.2444<\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@Tesla-i5g\/streams <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@polaris.spacex.24.7 <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@tesla-e1u\/streams <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@tesla-k4k <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@tesla-r4i <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">https:\/\/www.youtube[.]com\/@lives.micro.corp24 <\/td>\n<td>YouTube channel <\/td>\n<td>Potentially hijacked YouTube channel <\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">debate[.]gift <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">tesladebate[.]com <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">teslatrump[.]org <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">trump-debate[.]com <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">trumptesla[.]org <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">trump-elon[.]gives <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">usmusk[.]net <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">promo-tesla[.]io <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">ark-fund[.]pro  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">chaindrop[.]promo  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">crypto-participate[.]com  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">doubleetherx2[.]com  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">eth-up[.]gift  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">eth23[.]io  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">ether2022[.]info  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">eththemerge[.]net<\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">eththemerge[.]survay[.]pro  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">give-toncoin[.]com<\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">harryteams[.]com  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">takeeth[.]net  <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">x2-event[.]pro<\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<tr>\n<td class=\"code-format\">x2coinbase[.]org <\/td>\n<td>Domain<\/td>\n<td>Crypto scam site (old)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<style>\n.green {color: #00bd4d;}\n.code-format {\n    font-family: 'Courier New';\n}\ntable{\nfont-size: 16px;\nword-break: keep-all;\n}\n.image-caption {\n    font-size: 12px;\n}\n<\/style>\n<p><script>\njQuery('.single h1').html('No, Elon Musk was not in the <span class=\"gradient\">U.S. Presidential Debate<\/span>');\n<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybercriminals jumped at the opportunity last week to use the U.S. presidential debate as fodder for a new cryptocurrency scam. Victims were lured by deep fake videos claiming to show Elon Musk joining Donald Trump in a \u201cfiery\u201d debate against Kamala Harris. Unfortunately for viewers who tuned in to see Musk and Trump team up [&hellip;]<\/p>\n","protected":false},"author":397,"featured_media":10589,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[254],"tags":[930,1092,828,1093,30,1095],"class_list":{"0":"post-10577","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threat-intelligence","8":"tag-cybercrime","9":"tag-crypto","10":"tag-scam","11":"tag-stream-jacking","12":"tag-dns","13":"tag-you","14":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Deep Fake Crypto Scams | Infoblox<\/title>\n<meta name=\"description\" content=\"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Deep Fake Crypto Scams | Infoblox\" \/>\n<meta property=\"og:description\" content=\"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-18T16:00:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-18T16:08:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Infoblox Threat Intel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Deep Fake Crypto Scams | Infoblox\" \/>\n<meta name=\"twitter:description\" content=\"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Infoblox Threat Intel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/\"},\"author\":{\"name\":\"Infoblox Threat Intel\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/b6aed8965e3298a0817c16d32c0a67ae\"},\"headline\":\"No, Elon Musk was not in the U.S. Presidential Debate\",\"datePublished\":\"2024-09-18T16:00:12+00:00\",\"dateModified\":\"2024-09-18T16:08:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/\"},\"wordCount\":1384,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\",\"keywords\":[\"Cybercrime\",\"crypto\",\"scam\",\"stream-jacking\",\"DNS\",\"you\"],\"articleSection\":[\"Infoblox Threat Intel\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/\",\"name\":\"Deep Fake Crypto Scams | Infoblox\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\",\"datePublished\":\"2024-09-18T16:00:12+00:00\",\"dateModified\":\"2024-09-18T16:08:51+00:00\",\"description\":\"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/threat-intelligence\\\/no-elon-musk-was-not-in-the-us-presidential-debate\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Infoblox Threat Intel\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/threat-intelligence\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"No, Elon Musk was not in the U.S. Presidential Debate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/b6aed8965e3298a0817c16d32c0a67ae\",\"name\":\"Infoblox Threat Intel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_397_1714162589-96x96.png\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_397_1714162589-96x96.png\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_397_1714162589-96x96.png\",\"caption\":\"Infoblox Threat Intel\"},\"description\":\"Infoblox Threat Intel is the leading creator of original DNS threat intelligence, distinguishing itself in a sea of aggregators. What sets us apart? Two things: mad DNS skills and unparalleled visibility. DNS is notoriously tricky to interpret and hunt from, but our deep understanding and unique access to the internet's inner workings allow us to track down threat actors that others can't see. We're proactive, not just defensive, using our insights to disrupt cybercrime where it begins. We also believe in sharing knowledge to support the broader security community by publishing detailed research and releasing indicators on GitHub. In addition, our intel is seamlessly integrated into our Infoblox Protective DNS solutions, so customers automatically get its benefits, along with ridiculously low false positive rates.\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/infoblox-threat-intel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Deep Fake Crypto Scams | Infoblox","description":"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/","og_locale":"en_US","og_type":"article","og_title":"Deep Fake Crypto Scams | Infoblox","og_description":"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.","og_url":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/","og_site_name":"Infoblox Blog","article_published_time":"2024-09-18T16:00:12+00:00","article_modified_time":"2024-09-18T16:08:51+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","type":"image\/jpeg"}],"author":"Infoblox Threat Intel","twitter_card":"summary_large_image","twitter_title":"Deep Fake Crypto Scams | Infoblox","twitter_description":"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.","twitter_image":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","twitter_misc":{"Written by":"Infoblox Threat Intel","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/"},"author":{"name":"Infoblox Threat Intel","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/b6aed8965e3298a0817c16d32c0a67ae"},"headline":"No, Elon Musk was not in the U.S. Presidential Debate","datePublished":"2024-09-18T16:00:12+00:00","dateModified":"2024-09-18T16:08:51+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/"},"wordCount":1384,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","keywords":["Cybercrime","crypto","scam","stream-jacking","DNS","you"],"articleSection":["Infoblox Threat Intel"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/","url":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/","name":"Deep Fake Crypto Scams | Infoblox","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","datePublished":"2024-09-18T16:00:12+00:00","dateModified":"2024-09-18T16:08:51+00:00","description":"Cybercriminals used presidential debate-themed deep fake YouTube videos to advertise cryptocurrency scams. DNS Detection and Response can protect users by blocking access to these suspicious domains before the scam is launched.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/no-elon-musk-was-not-in-the-us-presidential-debate-thumbnail.jpg","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/threat-intelligence\/no-elon-musk-was-not-in-the-us-presidential-debate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Infoblox Threat Intel","item":"https:\/\/www.infoblox.com\/blog\/category\/threat-intelligence\/"},{"@type":"ListItem","position":3,"name":"No, Elon Musk was not in the U.S. Presidential Debate"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/b6aed8965e3298a0817c16d32c0a67ae","name":"Infoblox Threat Intel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_397_1714162589-96x96.png","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_397_1714162589-96x96.png","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_397_1714162589-96x96.png","caption":"Infoblox Threat Intel"},"description":"Infoblox Threat Intel is the leading creator of original DNS threat intelligence, distinguishing itself in a sea of aggregators. What sets us apart? Two things: mad DNS skills and unparalleled visibility. DNS is notoriously tricky to interpret and hunt from, but our deep understanding and unique access to the internet's inner workings allow us to track down threat actors that others can't see. We're proactive, not just defensive, using our insights to disrupt cybercrime where it begins. We also believe in sharing knowledge to support the broader security community by publishing detailed research and releasing indicators on GitHub. In addition, our intel is seamlessly integrated into our Infoblox Protective DNS solutions, so customers automatically get its benefits, along with ridiculously low false positive rates.","url":"https:\/\/www.infoblox.com\/blog\/author\/infoblox-threat-intel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/10577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/397"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=10577"}],"version-history":[{"count":13,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/10577\/revisions"}],"predecessor-version":[{"id":10614,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/10577\/revisions\/10614"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/10589"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=10577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=10577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=10577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}