Deepfake scam abuses Bitdefender name with Romanian officials' likenesses
Preliminary Why: Publisher not yet named · subject to change
Status: no action reported
No source states: loss or records, developer and model, agent tool, could do, deployer, industry.
Severity moderate: Test: moderate, data or systems of others touched with a bounded scope stated. Fact: victims' personal data and deposits are at stake, and the source states view counts (about 9,000 rising to over 30,000 within 24 hours) but no count of affected parties or losses.
Fraudulent Meta ads promoted a fake investment platform called the National Investment Platform, using a deepfake video of Romanian central bank Governor Mugur Isărescu and false claims of a partnership with Bitdefender CEO Florin Talpeș. The ads also abused Bitdefender's name. Bitdefender Labs telemetry showed engagement rising rapidly, with one promoted video's views growing from approximately 9,000 to over 30,000 within 24 hours and roughly 1 in 14 viewers clicking the ad. Users were redirected to a site presenting the app as Profit Gold Românesc, which asked for registration details and a deposit of 1,200 to 1,700 lei. Bitdefender stated that it does not operate or endorse any such platform and blocked the website as fraudulent. Bitdefender described the ad rotation as an apparent attempt to evade moderation systems. The sources do not state the number of victims or the losses.
What happened
No source tells the story step by step yet.
What was done
No source states an action or fix.
Risks
Sorted by rule from the case's fields; not yet read from the sources.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
ModelMarking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers
ApplicationPeople told they are dealing with AI
Infrastructure / targetEvidence
No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.
Show the full account: 5 items from the primary sources
What happened, in order
- 2024 Bitdefender reports earlier waves of deepfake and fraudulent AI investment scams.
- 2025 Attackers ran a similar scam impersonating Romanian presidential candidates.
Not dated in the sources:
- Views of one promoted video grew from approximately 9,000 to over 30,000.
- Rapid ad rotation is observed, suggesting attempts to evade moderation.
- Bitdefender blocks the promoted website as fraudulent.
Show every field, with its source and grade
What happened
Impact
Notes on gaps
Loss amounts, victim counts and data categories collected by the registration form are not stated. The model or tool that produced the deepfake is not named.
LR-2026-0409 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON