Vietnamese Cyber Tricksters: Fake AI Ads Swindling Millions on Social Media!
Mandiant Threat Defense uncovers a clever cyber campaign by Vietnam-based UNC6032, using fake social media ads for AI video tools to steal credentials. Beware of ads promising AI magic—sometimes, they just want to make your data disappear faster than you can say “abracadabra.”

Hot Take:
Who knew the Vietnamese had a knack for crafting such deceptive digital drama? UNC6032’s performance in the cybercrime theatre has everyone fooled, proving that not every AI tool ad will lead you to Hollywood stardom—sometimes it just leads to your data’s tragic demise!
Key Points:
- UNC6032, a Vietnam-based group, uses fake social media ads to target users interested in AI video tools.
- The group’s fake ads mimic popular platforms like Luma AI and Canva Dream Lab.
- Victims are tricked into downloading malware that steals credentials and personal information.
- The malware, called STARKVEIL, is sophisticated and written in Rust.
- Mandiant is collaborating with Meta and LinkedIn to combat this ongoing threat.
Already a member? Log in here