Showing posts with label scam. Show all posts
Showing posts with label scam. Show all posts
Thursday, 29 August 2024
After half-a-million views, "Dr Noakes" erection dysfunction "advert" taken down by Facebook + suggested actions for META to do better
I am pleased to report that The Noakes Foundation has succeeded in getting a fake 'Dr Noakes' advert for erectile dysfunction pills removed from META. This is after a month of trying varied methods without success to stop the brandjacking of Professor Tim Noakes' identity, and his impersonation via deepfake reels and accounts on Facebook.
On Thursday the 25th of July we were first alerted to a deep fake advert featuring Emeritus Professor Tim Noakes that ran on META's Facebook, and Tik Tok. As Figure 1 shows, the Facebook advert had been viewed over 584,000 times, liked by 637 accounts, and received 56 comments. While much of the likes and comments may be from bots, such high viewership of the reel itself is highly concerning. It suggests how rapidly a cybercriminals' adverts spread to potential victims- at over 16,000 views per day!
This account was reported to Facebook via a third-party. During this “warning period”, the account's owners launched four new "Dr Tim Noakes" campaigns. Each was documented and reported to Facebook. Interestingly, the links to the online store “sites” were dead ends. However, a 'Call Now' button could still support a call agent's phishing of victims financial details.
The scammers flick-flacked between varied accounts in committing this cybercrime- they initially used "Hughles" (Figures 6 and 7), "Cameron Sullivan Setting", and "Murthyrius" in launching the same deepfake ads. By the 28th of July, 13 of these "adverts were taken down by Facebook, but the scammers shifted to new accounts, "Longjiaren.com" (Figure 8) and "Brentlinger" (renamed "Brentlingerkk" after we reported it). On the 29th of August, these accounts and their adverts were disabled by Facebook.
Such adverts typically reach viewers outside The Noakes Foundation, Nutrition Network and Eat Better South Africa’s networks. Their audiences know Professor Noakes does not endorse miracle weight loss and other cures. To reach vulnerable publics, The Noakes Foundation has run Facebook alerts to warn about this latest cybercrime. Ironically, the most recent advert attempting to flag the "Dr Noakes" scam was blocked by Facebook advertising (Figure 9)!
Brandjacking is the ‘allegedly illegal use of trademarked brand names - on social network sites’ (Ramsey, 2010 p851). Cybercriminals misuse the trademarks of others without authorization. For example, ‘Facebookjacking’ and ‘Instajacking’ see public figures’ usernames, account names, and/or digital content being used for fake accounts and video "adverts" on Meta’s respective popular social networks- Facebook and Instagram. Such brandjacking via fake celebrity endorsement spans several types of crime: (1) Impersonation, (2) Non-consensual image sharing, and (3) the Infringement of a public figure's intellectual property through copyright violation of still images and audio-video. In addition to causing (4) Reputation damage to the public figure through suggesting association with a scam, cybercriminals may use it for (5) Financial fraud and hacking. Given that these are serious crimes, it is worrying that public figures in South Africa seem to receive minimal, if any, support from social media companies for stopping the fake endorsement digital crime. There is also a gap in scholarship for how public figures worldwide, and in SA, might best tackle this persistent crime.
 |
| Figure 1. Screenshot from the fake 'Dr Noakes' erection dysfunction advert on Facebook (2024) |
 |
| Figure 2. Screenshot of scammers' Facebook account featuring "Dr Tim Noakes" erection pill adverts (2024) |
 |
| Figure 3. Scammer account location behind fake Facebook Dr Tim Noakes adverts (2024) |
Our initial Facebook advert lookup revealed that one page was running four adverts (Figure 2). This account ("Tristan") was managed from Nepal and India (Figure 3).
 |
| Figure 4. Screenshot of fake Tristan account header behind Dr Tim Noakes adverts on Facebook (2024) |
This fake account page also leveraged fake interactions to suggest that it was liked, and followed (Figures 4 and 5).
 |
| Figure 5. Screenshot of fake "Tristan" Facebook account details behind Dr Tim Noakes adverts (2024) |
The absence of a link for data gathering suggested that this scam was primarily not for phishing such sensitive data, or selling fake products. Rather the advert's design seems geared for stealing advertising revenue via deepfake creation. The scammers hack into the "advertiser"'s Meta account to distribute fake adverts that run up tens-of-thousands of dollars in spend. In this case it was a government-based account from an unknown location. Such adverts may also carry malware, with users clicking on them being vulnerable to hacking. These paid ads also have the impact of pushing potential followers to the advertiser’s page. More followers results in more people seeing the content, and Meta indirectly benefiting from the cybercrime's increased visibility by achieving higher advertising rates.
 |
| Figure 6. Screenshot of scammers' "Hughles" Facebook account (2024) |
 |
| Figure 7. Screenshot of scammers' "Hughles" Facebook account's Dr Tim Noakes adverts (2024) |
The scammers flick-flacked between varied accounts in committing this cybercrime- they initially used "Hughles" (Figures 6 and 7), "Cameron Sullivan Setting", and "Murthyrius" in launching the same deepfake ads. By the 28th of July, 13 of these "adverts were taken down by Facebook, but the scammers shifted to new accounts, "Longjiaren.com" (Figure 8) and "Brentlinger" (renamed "Brentlingerkk" after we reported it). On the 29th of August, these accounts and their adverts were disabled by Facebook.
 |
| Figure 8. Screenshot of Longjiaren.com scammers Facebook account for fake adverts (2024) |
Such adverts typically reach viewers outside The Noakes Foundation, Nutrition Network and Eat Better South Africa’s networks. Their audiences know Professor Noakes does not endorse miracle weight loss and other cures. To reach vulnerable publics, The Noakes Foundation has run Facebook alerts to warn about this latest cybercrime. Ironically, the most recent advert attempting to flag the "Dr Noakes" scam was blocked by Facebook advertising (Figure 9)!
 |
| Figure 9. Facebook rejects anti scam ad from The Noakes Foundation (2024) |
Actions for META to do better in fighting cybercrime on its platforms
As Anna Collard (KnowBe4) spotlights in her recent interview with eNews, social media platforms are a vital source for news in Africa. Consequently, these platforms must be held more accountable for any slow responses to synthetic- and deep-fakes. It is greatly concerning that META's Facebook platform is so rife with many serious crimes (ranging from sextortion and child-trafficking to drug pushing).
META can be more pro-active in tackling such cybercrimes {plus less serious ones like fake celebrity endorsement}, by prioritising these seven steps below:
1) Actively communicate that all users' must have a 'zero trust' mindset;
2) Create a compliance team that is dedicated to thwarting cybercriminals' activities;
3) Offer at least one human contact on each META platform for serious reports of criminal misuse;
4) Promote frequent reporters of cybercrime by referring them to META's Trusted Partners or Business Partners for rapid aid;
5) Encourage external research on every platform regarding cybercriminals' activities (such initiatives could develop inexpensive tools. For example, for celebrities' reps to protect public figures from being deep faked in "adverts");
6) Provide more feedback on what was influential in reporting cybercrime for accounts and content to be removed. Without such feedback, fraud reporters may not be sure which reports are most effective;
7) Have a recommendation system in place for support networks that cybervictims can approach (such as referring South Africans to its national CyberSecurity hub).
2) Create a compliance team that is dedicated to thwarting cybercriminals' activities;
3) Offer at least one human contact on each META platform for serious reports of criminal misuse;
4) Promote frequent reporters of cybercrime by referring them to META's Trusted Partners or Business Partners for rapid aid;
5) Encourage external research on every platform regarding cybercriminals' activities (such initiatives could develop inexpensive tools. For example, for celebrities' reps to protect public figures from being deep faked in "adverts");
6) Provide more feedback on what was influential in reporting cybercrime for accounts and content to be removed. Without such feedback, fraud reporters may not be sure which reports are most effective;
7) Have a recommendation system in place for support networks that cybervictims can approach (such as referring South Africans to its national CyberSecurity hub).
In addition, META might consider these suggestions from The Noakes Foundation's Report Fake Endorsement initiative, to: (8) enhance deepfake detection technology, (9) apply stricter verification processes, (10) increase transparency and reporting tools, (11) support local educational initiatives, (12) promote collaborations with local cybercrime experts, (13) implement proactive monitoring systems to detect unusual patterns in ads, and (14) reinforced consequences for violations.
By sharing this "Dr Noakes" case study (and developing others), The Noakes Foundation hopes to raise awareness of the fake celebrity endorsement cybercrime, plus the importance of Big Tech guardians stepping up to fulfil their responsibilities. We are also liaising with sympathetic allies (KnowBe4® Africa Security Awareness, Orange Defence, Wolfpack Information Risk and others) to grow the networks necessary to better support cybercrime prevention in South Africa.
Much can be done for targeted digital literacy education for vulnerable targets of cybercrime (such as #StopTheScam for silver surfers). We will also continue advocating that capable guardians (such as META, Twitter and TikTok) become more pro-active in protecting vulnerable publics on their platforms. Their gatekeeping role is vital, as the traditional bulwarks against crime (education, the police and the law) seem unable to catch-up with the "evolution"of global cybercrimes!
Thursday, 29 June 2023
Twitter Support must do better for helping celebrity and public victims of a global diet phishing scam!
Worldwide, diet scammers are marketing fake “endorsements” from celebrities across social media adverts, search engine ads and online content to phish victims’ financial details. The sheer volume of content the fraudsters produce is very difficult for celebrities and their representatives to tackle alone. One major obstacle to stopping the false marketing of “miracle weightloss products” is the reluctance of social media platforms to take down fake accounts and ads timeously. The fraudsters typically run the ads regionally for a few days in which they are displayed to hundreds of thousands of people. Just a fraction of an ad’s viewers need to share their financial details for the scam to be highly profitable!
This post presents the underwhelming example of reporting diet phishing accounts to Twitter Support as a way to spotlight the difficulties of tackling fraud via social media platforms. Hopefully publicly shaming @TwitterSupport will encourage its leaders to help address the global diet phishing scam properly, whilst also providing decent reporting options for celebrities and their representatives:
Amazing female celebs in the United Kingdom have also seen their identities stolen. Diet phishing scammers have hijacked the IDs of Holly Willis (@hollywills), Amanda Holden (@AmandaHolden), Anne Hegerty (@anne_hegerty) and Dawn French (@Dawn_French). Even the British (@RoyalFamily) has not been immune, with the targeting of Catherine, the Princess of Wales (@KensingtonRoyal) and the Former Queen Elisabeth II, RIP and God Bless. Sadly, Meghan Duchess of Sussex, has been targeted too...
Down Under, well-known Australian personalities, such as its national treasure Maggie Beer (@maggie_beer) and Farmer Wants A Wife host Sam Armytage (@sam_armytage) have had their identities misused for fake #weightloss endorsements. And also Mr Embarrassing Bodies Down Under himself, Dr Brad McKay (@DrBradMcKay).
In Sweden, Dr Andreas Eenfeldt (@DrEenfeldt from @DietDoctor), another leader in the low carbohydrate movement, has been targeted in promotions of fake #keto products. Sadly, the fake ads seem to generate far more attention and action than his or my father's health advice!
N.B. The examples above are not extensive in terms of all victims. We largely know of celebrities in the Anglosphere whose identities were stolen, then featured in English language reports and related search engine results.
Figure 1. Twitter search results for Tim Noakes keto gummies (fake product accounts) (20 June, 2023)
This is a very time consuming process- in the first place, the same complaint must be individually submitted for each account. Secondly, the representative reporting these complaints must also upload and/or email related proof of ID, business and legal documentation to Twitter Support before it will consider investigating whether impersonation is taking place.
Fake Twitter accounts, including those below, were reported to Twitter, with support documentation:
@NoakesGumm28693 0327118996 @TimNoakesHoax 0327120384
@TimGummies 0327119602 @NoakesGumm91126 0327119675
@gummies_tim 0327120030 @TimNoakes_ZA 0327119741
@tim_gummies 0327118910 @NoakesSouth 0327118634
@timnoakesketo0 0327119362 @NoakesGumm22663 0327119487
In each case, @TwitterSupport replied that the following accounts are NOT in violation of Twitter’s misleading and deceptive identities policy. This would seem to contradict the obvious evidence that Tim Noakes' name has been hijacked by scammers for misleading victims with a fake product!
Figure 3 shows a typical example of a fake account's style. It uses Tim Noakes' name, plus stock photography in marketing a non-existent product. It only tweeted on May the 24th, and is followed by one person. Any knowledgeable complaint reviewer would surely consider this to be a case of a scammer creating a misleading and deceptive account for gaming Twitter's search engine. However, Twitter Support does not agree, nor explain why in its generic correspondence around each scam account.
This post presents the underwhelming example of reporting diet phishing accounts to Twitter Support as a way to spotlight the difficulties of tackling fraud via social media platforms. Hopefully publicly shaming @TwitterSupport will encourage its leaders to help address the global diet phishing scam properly, whilst also providing decent reporting options for celebrities and their representatives:
South African celebrities hijacked in fake diet adverts
A major factor in the “success" of this global scam (it has been running since 2014!) is the poor response from Facebook, Instagram, Twitter and other social media companies to formal requests to close fake accounts and their advertisement campaigns. Their ineffective responses are legally shortsighted: social media companies that repeatedly permit diet phishing ads on their platforms are complicit in a fraud, and possibly in the delict of passing off. For example, in South Africa, the diet phishing scam has undoubtedly harmed the reputation of Prof Tim Noakes and The Noakes Foundation through its fraudulent, direct misrepresentation, of fake products. These have certainly confused the public and @TheNoakesF has lost goodwill from the many victims of the fraud’s misrepresentation!Prof Noakes, is just one of many well-known individuals whose identities have been hijacked. The South African version of the scam has seen: Minki van der Westhuizen, Jeannie D (@Jeannieous), Basetsana Kumalo (@basetsanakumalo), Nkhensani Nkosi (@NkhensaniNkosi1), Shashi Naidoo (@SHASHINAIDOO), Tumi Morake (@tumi_morake), Dawn King (@DawnTKing), Ina Parmaan (@inapaarman) and Dr Shabir Madhi (@ShabirMadh) all having their reputations tarnished.
Since Prof Noakes’ identity was first hijacked in 2020, The Noakes Foundation (TNF) and partners (such as Dr Michael Mol and Hello Doctor) have tried many options to stop the scam. For example, TNF developed and publicised content against it via blogposts, such as Keto Extreme Scams Social Media Users Out of Thousands. TNF also produced these videos: Professor Tim Noakes vs. Diet Phishing: Exposing a Global Scam with Fake Celebrity Endorsements, Dr Michael Mol highlighting Diet Scams and Prof Noakes Speaks Out Against The Ongoing Diet Scam. Sadly, The Noakes Foundation’s repeated warnings to the public don’t seem to be making much difference in preventing new victims!
Since Prof Noakes’ identity was first hijacked in 2020, The Noakes Foundation (TNF) and partners (such as Dr Michael Mol and Hello Doctor) have tried many options to stop the scam. For example, TNF developed and publicised content against it via blogposts, such as Keto Extreme Scams Social Media Users Out of Thousands. TNF also produced these videos: Professor Tim Noakes vs. Diet Phishing: Exposing a Global Scam with Fake Celebrity Endorsements, Dr Michael Mol highlighting Diet Scams and Prof Noakes Speaks Out Against The Ongoing Diet Scam. Sadly, The Noakes Foundation’s repeated warnings to the public don’t seem to be making much difference in preventing new victims!
American, Australian, British and Swedish celebs hijacked, too!
In the United States, the diet phishing scam has also stolen the identities of major celebrities. Most are in popular TV franchises: Oprah Winfrey (@Oprah), Dr Mehmet Oz (@DrOz) Dr Phil (@DrPhil), Dolly Parton (@DollyParton), Kelly Clarkson (@kellyclarkson), the Kardashian Family (@kardashianshulu + @KimKardashian), Kelly Osbourne (@KellyOsbourne), Chrissy Teigen (@chrissyteigen), Martha Maccallum (@marthamaccallum), Blake Shelton (@blakeshelton) and #TomSelleck 🥸. It’s a Magnum opus of fraud!Amazing female celebs in the United Kingdom have also seen their identities stolen. Diet phishing scammers have hijacked the IDs of Holly Willis (@hollywills), Amanda Holden (@AmandaHolden), Anne Hegerty (@anne_hegerty) and Dawn French (@Dawn_French). Even the British (@RoyalFamily) has not been immune, with the targeting of Catherine, the Princess of Wales (@KensingtonRoyal) and the Former Queen Elisabeth II, RIP and God Bless. Sadly, Meghan Duchess of Sussex, has been targeted too...
Down Under, well-known Australian personalities, such as its national treasure Maggie Beer (@maggie_beer) and Farmer Wants A Wife host Sam Armytage (@sam_armytage) have had their identities misused for fake #weightloss endorsements. And also Mr Embarrassing Bodies Down Under himself, Dr Brad McKay (@DrBradMcKay).
In Sweden, Dr Andreas Eenfeldt (@DrEenfeldt from @DietDoctor), another leader in the low carbohydrate movement, has been targeted in promotions of fake #keto products. Sadly, the fake ads seem to generate far more attention and action than his or my father's health advice!
N.B. The examples above are not extensive in terms of all victims. We largely know of celebrities in the Anglosphere whose identities were stolen, then featured in English language reports and related search engine results.
Deceptive "Tim Noakes" Twitter accounts market Keto Gummies
Just as the celebrity names stolen for the fake ads change often, so do the product names. A few examples of these fake names are Capsaicin, FigurWeightLossCapsules, Garcinia, Ketovatru and KetoLifePlus. Be warned that new "products" are added every month! One particularly common term used in the scammers' product names is "Keto Gummies". A recent Twitter search for "Tim Noakes keto gummies" suggested many fake accounts in Figure 1 (just the top view!), plus diverse "product" names.Figure 1. Twitter search results for Tim Noakes keto gummies (fake product accounts) (20 June, 2023)
Twitter Support does not think fake accounts are misleading and deceptive?!
These accounts have clearly been setup to fraudulently market "keto gummies" by suggesting an association with "Tim Noakes". So, the logical response for any representative of The Noakes Foundation would seem to be reporting each fake account for violating Twitter’s misleading and deceptive identities policy, right?Figure 2. Reporting the fake Tim Noakes Keto Gummies account to Twitter support
Fake Twitter accounts, including those below, were reported to Twitter, with support documentation:
@NoakesGumm28693 0327118996 @TimNoakesHoax 0327120384
@TimGummies 0327119602 @NoakesGumm91126 0327119675
@gummies_tim 0327120030 @TimNoakes_ZA 0327119741
@tim_gummies 0327118910 @NoakesSouth 0327118634
@timnoakesketo0 0327119362 @NoakesGumm22663 0327119487
In each case, @TwitterSupport replied that the following accounts are NOT in violation of Twitter’s misleading and deceptive identities policy. This would seem to contradict the obvious evidence that Tim Noakes' name has been hijacked by scammers for misleading victims with a fake product!
The Noakes Foundation has supplied its legal team with Twitter's related correspondence for review. I will update this post as developments progress (or fail to!) with the remarkably unhelpful and potentially criminally negligent @TwitterSupport.
This "Tim Noakes keto gummies" Twitter account is not deceptive?!
Figure 3. Fake @TimNoakesKetoGummies account
Figure 3 shows a typical example of a fake account's style. It uses Tim Noakes' name, plus stock photography in marketing a non-existent product. It only tweeted on May the 24th, and is followed by one person. Any knowledgeable complaint reviewer would surely consider this to be a case of a scammer creating a misleading and deceptive account for gaming Twitter's search engine. However, Twitter Support does not agree, nor explain why in its generic correspondence around each scam account.
From stealing victims' banking details to delivering dubious products
As fitness expert Reggie Wilson (@fitforfreelance) deftly explains in his 30 second video, Keto Gummies cannot work. It is most concerning that The Noakes Foundation has received reports that scammers are now delivering a physical product to South African victims. Not only are fake #KetoGummies products being marketed locally via takealot.com BUT are also offered internationally via Amazon.com, and possibly other major online retailers!
Just as the scammers link themselves to celebs on Twitter, they also target the popular television franchises they're from. Notably: AmericasNextTopModel, DragonsDen, The Kardashians, The Oprah Show and Shark Tank. On Twitter, national businesses are also being misrepresented as selling these fake products, such as Walmart in the US, Jean Coutu pharmacies in Canada and Dischem in South Africa. Type in keto gummies into these retailers search engines and you will see that many options pop up, some seemingly associated with popular celebrities and TV franchises.
The Noakes Foundation is keen to work with affected celebrities, their representatives and business to raise the pressure on social media companies to make a proper response to the scammers and fake ads they host. Do let us know if you would like to help using the comments below, or by emailing reportdietscam@gmail.com.
Subscribe to:
Posts
(
Atom
)
Posts
orcid.org/0000-0001-9566-8983
