do son 
Cybersecurity researchers at Proofpoint have discovered a resurgence of an old technology being used in a new Bitcoin scam: the Multimedia Messaging Service (MMS). This “VidSpam” campaign uses 3GP video files to trick victims into visiting fraudulent investment platforms.
While MMS has largely been replaced by modern messaging apps and RCS, its very obsolescence makes it an effective tool for scammers. The novelty of receiving an MMS message often piques curiosity, leading recipients to open it. Proofpoint’s research indicates that 99% of mobile messages are viewed, with 90% read within three minutes.
The VidSpam attack uses tiny (14KB) video clips that are essentially static images with a “Play” button. Clicking the button plays a two-second loop of the same frame, typically featuring images of supposed cryptocurrency success stories, fake awards, and promises of high returns. The MMS message also includes a link to a fake forum that invites users to join a WhatsApp investment group.
Within the WhatsApp group, scammers use high-pressure tactics, offering “guaranteed” profits and showcasing fabricated testimonials and fake transaction records. They create a false sense of urgency to pressure victims into investing. Once money is sent, victims are often blocked or further exploited with promises of even greater (and equally fictitious) returns. Recovering these funds is nearly impossible.
The 3GP format is strategically chosen for its small file size, ensuring compatibility across a wide range of devices. Its video format also helps bypass content security filters, which are more effective at detecting text and image-based threats.
Experts recommend disabling MMS if it’s not needed. Clearing the MMSC, MMS Proxy, and MMS Port fields in mobile network settings can also help. Most importantly, users should never click on links or download files from unknown messages. Any investment offers received via messaging apps, SMS, or MMS should be treated with extreme skepticism, as these channels are frequently used for financial fraud.
