One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign
Original Article Summary
A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences.
Read full article at Trendmicro.com✨Our Analysis
Trend Micro's exposé of a 5-year influence and fraud 'Patriot Bait' campaign, which utilized AI to automate content and credential theft on a Telegram channel, reveals a sophisticated threat actor's ability to manipulate online audiences. This means that website owners, particularly those with American audiences, must be vigilant about potential AI-driven fraud schemes and influence campaigns targeting their users. The fact that a solo threat actor could sustain a 5-year campaign using AI automation highlights the need for website owners to stay informed about emerging threats and adapt their security measures accordingly. To protect their websites and users, website owners can take the following actionable steps: monitor AI bot traffic for suspicious patterns, regularly review and update their llms.txt files to block malicious bots, and implement robust user verification processes to prevent credential theft and fraud schemes. By staying proactive and informed, website owners can reduce the risk of their platforms being exploited by AI-driven influence and fraud campaigns.
Track AI Bots on Your Website
See which AI crawlers like ChatGPT, Claude, and Gemini are visiting your site. Get real-time analytics and actionable insights.
Start Tracking Free →


