Uploaded February 2024 | Updated September 2026, 2 weeks ago
This is a quick overview of the latest Facebook scam. It's a piece of malware claiming to be Sora from OpenAI. Please don't fall for this kind of scam. If you know someone who might, and they don't believe you when you tell them it's a scam, send them this video.
In another video I'll show how you can reverse engineer the payload on these scams to see exactly what it will do and where it's going to send the things it steals from people.
But this one is just an overview of the scam itself. In this case, they stole a politician's page, giving them immediate access to his 3.4k followers. They turned off comments, and probably used some dummy accounts to make it initially look legit.
I report these immediately after I find them. I know a lot of other people do, too. But Facebook refuses to do anything about them.
Seriously, all they'd need to do is (after catching the first scam like this), blacklist current and subsequent ads that use the same or nearly same wording, claiming to be something that isn't publicly available. Absolutely blacklist any ad that has a downloadable link in it. Require that the advertiser redirects users to their website. Require that ads can only be run from accounts that are a certain age, add some website linkback necessary to verify that the ad is legit. There are tons of ways Facebook could prevent this or at least INSTANTLY stop it once it's detected.
This is a quick overview of the latest Facebook scam. It's a piece of malware claiming to be Sora from OpenAI. Please don't fall for this kind of scam. If you know someone who might, and they don't believe you when you tell them it's a scam, send them this video.
In another video I'll show how you can reverse engineer the payload on these scams to see exactly what it will do and where it's going to send the things it steals from people.
But this one is just an overview of the scam itself. In this case, they stole a politician's page, giving them immediate access to his 3.4k followers. They turned off comments, and probably used some dummy accounts to make it initially look legit.
I report these immediately after I find them. I know a lot of other people do, too. But Facebook refuses to do anything about them.
Seriously, all they'd need to do is (after catching the first scam like this), blacklist current and subsequent ads that use the same or nearly same wording, claiming to be something that isn't publicly available. Absolutely blacklist any ad that has a downloadable link in it. Require that the advertiser redirects users to their website. Require that ads can only be run from accounts that are a certain age, add some website linkback necessary to verify that the ad is legit. There are tons of ways Facebook could prevent this or at least INSTANTLY stop it once it's detected.
