Zyan Cabrera
Scammers posing as makeup brands reportedly tricked the ‘Pinay Gold Medalist’ online. @jerriel_cryazee/TikTok

A viral video controversy involving a young Filipino student and athlete, identified online as the 'Pinay Gold Medalist' or Zyan Jeriel Cabrera, has triggered urgent warnings regarding a sophisticated phishing campaign. The situation, which has gained significant traction across social media, is reportedly being used as bait by cybercriminals to compromise the personal accounts of high-profile users.

The scam involves fraudsters masquerading as legitimate makeup brands to lure influencers into a 'trap' designed to harvest iCloud credentials. According to accounts from individuals close to the athlete's family, the initial security breach reportedly began with a fraudulent collaboration offer from an account posing as the cosmetics brand Pinkflash.

The incident has highlighted a growing trend of 'social engineering' attacks within the South East Asian influencer community. Beyond the immediate distress caused to the individuals in the footage, cybersecurity monitors warn that the circulation of such material is frequently a secondary effect of targeted digital theft as opposed to a deliberate leak by those involved.

The 'Makeup Brand' Phishing Tactic

Alleged reports from peers of the athlete suggest that the scam is highly targeted. Fraudsters reportedly use accounts with significant follower counts to appear authentic before sending direct messages regarding paid partnerships. Victims are then directed to an external link to 'confirm' their details, which instead serves as a portal for hackers to gain access to private 'hidden' albums and cloud storage.

This pattern appears to mirror a previous incident involving another well-known TikTok creator, identified as 'Chichi', who was reportedly targeted by a fake account posing as the brand Issy & Co. In both instances, the goal was not immediate financial theft but the acquisition of private media, which is then weaponised or sold online.

Concerns for Mental Health

The fallout from the leak has sparked a fierce debate regarding the ethics of content creators who have used the scandal for 'clout' or engagement. Sources close to Cabrera indicate that the student is facing severe emotional distress, with local community members calling for an end to the mockery and 'memes' associated with the footage.

There has been significant criticism directed at established streamers and public figures who have allegedly made light of the situation. The controversy has underscored the distinction between professional content creators and a private student whose personal data was stolen. In UK and international law, the dissemination of such material without consent is increasingly recognised as a severe violation of privacy with long-term psychological consequences.

Safety Protocols for Creators

The incident serves as a reminder for social media users to exercise caution when engaging with unsolicited business proposals. The Cybercrime Investigation and Coordinating Centre in the Philippines recommends that influencers verify all collaboration offers through official corporate channels and avoid entering login credentials into any third-party websites linked via direct messages. Legitimate brands, such as Pinkflash and Issy & Co, typically communicate through verified email domains to avoid the security risks associated with unverified social media handles.

Furthermore, the case has prompted a discussion on digital habits for couples. While the footage was reportedly intended to remain private, the ease with which cloud services can be compromised suggests that 'hidden' folders may not offer absolute security against determined phishing attempts. As the investigation into the source of the leak continues, the focus remains on the dual threat of digital privacy breaches and the human cost of viral notoriety.