A surge in deceptive videos featuring a fabricated likeness of social media influencer Zyan Cabrera has ensnared thousands of users, covertly harvesting their login credentials for platforms like Instagram, TikTok, and Facebook. These deepfake clips, which have amassed millions of views across short-form video apps, lure viewers with promises of exclusive content, giveaways, or "secret hacks" tied to Cabrera's persona, only to direct them to phishing sites mimicking official login pages.
The scam operates with chilling precision: a video purporting to be Cabrera appears in users' feeds, often starting with a teaser like "DM me your login to claim your prize" or "Click here for my private story unlock." Victims are funneled to counterfeit websites that replicate the exact design of social media portals, prompting them to enter usernames and passwords. Once submitted, the data is siphoned to cybercriminals, who then hijack accounts for further fraud, spam campaigns, or resale on the dark web. Cybersecurity firm SentinelOne reports over 15,000 compromised accounts linked to these videos in the past month alone.
Zyan Cabrera, a 22-year-old TikTok sensation known for lifestyle vlogs and dance challenges with 12 million followers, confirmed the videos are unauthorized deepfakes generated by AI tools. "It's my face, my voice, but none of my words," Cabrera stated in a verified post. The fakes leverage advanced facial mapping and voice synthesis, making them nearly indistinguishable from authentic content at first glance. Platforms have ramped up removals, but the volume—estimated at 500 new videos daily—forces a cat-and-mouse game with bad actors who quickly adapt by tweaking thumbnails and captions.
This incident underscores the escalating threat of AI-driven impersonation in the creator economy, where trust in influencers translates directly to vulnerability. Experts at the Cyber Threat Alliance note a 300% rise in deepfake phishing since 2024, with social media as prime terrain due to its algorithmic amplification of viral content. "Scammers exploit familiarity; seeing a trusted face lowers defenses," said Dr. Elena Voss, a digital forensics specialist. Financial losses from account takeovers already exceed £10 million in the UK this year, per Action Fraud data.
To safeguard against such ploys, verify links before clicking—hover to check URLs—and enable two-factor authentication on all accounts. Cabrera advises followers to report suspicious videos directly through app tools and stick to official profiles with blue-check verification. Browser extensions like uBlock Origin and password managers with breach alerts offer additional layers of defense. As AI tools democratize deepfake creation, vigilance remains the strongest shield in an era where seeing is no longer believing.