RESEARCHERS tracked a large AI‑themed investment scam campaign that spans 15,500 domains, using cloaking and deepfakes to hide from security tools while targeting ordinary users, according to Infoblox. Criminals abused the Keitaro ad‑tracking platform as part of a cloaking system so real victims see scam content while security scanners and others see harmless pages.
Keitaro is a commercial tracking platform originally meant for digital marketers to manage ad campaigns, test ads and route visitors to different landing pages, and criminals found it easy to spin up on regular hosting to run scams at scale. Traffic starts in many places, with compromised websites, spam emails, social media posts and online ads all routing through the same tracking infrastructure, the article notes.
The scam sites typically promise “Smart AI Trading Technology” or “Intelligent Trading Solutions” and claim consistently high returns, often reinforced with deepfake images or fabricated media to look more credible. The piece also explains that following a link triggers cloaking, which tailors the displayed page to the viewer’s profile, making detection and shutdown difficult.