Your brand’s verified Twitter handle is safe, but a cloned Instagram account is DM-ing customers a ‘limited-time crypto giveaway’—and your SOC has no idea it exists.
Attackers have figured out that forging a social profile is cheaper and faster than buying a look-alike domain, warming it up, and dodging DMARC filters.
Instead they spin up a fake Facebook, Instagram, LinkedIn, TikTok, YouTube, or X account, slap on a stolen logo, and start pitching crypto wallets or coupon codes within minutes. Traditional domain-takedown tools never see it; the SOC’s inbox never gets an alert.
Cisco is trying to close that gap without adding another dashboard to the pile. A new Social Media Monitoring add-on delivered through its partnership of Red Sift Brand Trust plugs into the same console that already handles email security and domain protection.
It continuously scans millions of profiles for company or executive impersonations, surfaces only the high-fidelity hits, and embeds one-click takedown buttons so analysts don’t have to “switch tools or add operational complexity.”
The timing isn’t accidental. Generative AI has collapsed the effort needed to clone a brand’s visuals and voice.
“AI tools have made it faster and cheaper than ever to create convincing fakes at scale, and the barrier to entry keeps dropping.”
Cisco’s pitch: if the defender’s cost keeps rising—more alerts, more platforms, more burned analysts automation has to move in the opposite direction. Folding social-media hunts into the existing Secure Email Threat Defense stack means the same playbooks that yank malicious domains can now yank fake profiles, at least when the platforms cooperate.
Takedown speed still depends on Facebook, LinkedIn, or TikTok actually answering the ticket, something Cisco can’t script away.
Look, the add-on won’t stop a determined scammer from spinning up the next account, but it shrinks the window between “first DM” and “profile gone” from days to hours assuming the social networks keep their end of the bargain.
Source: Cisco