{"data":{"id":"588c297f-7850-4ef2-947a-ec63cca0bea6","title":"Beware these fake websites selling subscriptions to AI assistants","summary":"Malwarebytes researchers found fake websites impersonating AI products such as GPT-6 Astra, DaVinci Resolve, PixAI and OpenCut, which charge visitors $10 a month up to $2,000 a year for access. The sites use genuine Google sign-in pages and ask users to upload documents or recordings, creating data exposure risk for enterprises whose staff buy them outside IT. The researchers suspect one operator is behind all the sites, which were built with the same commercial website creation kit.","solution":"Malwarebytes recommends looking beyond a site's design and familiar authentication options, checking who operates the service, looking for verifiable company information, and examining the developer details shown during Google authentication. It also advises users not to upload sensitive documents, recordings or other data to unfamiliar AI services, and to review and remove unrecognized connections in their Google Account.","labels":["security","privacy"],"sourceUrl":"https://www.csoonline.com/article/4224923/beware-these-fake-websites-selling-subscriptions-to-ai-assistants-2.html","publishedAt":"2026-09-22T13:11:29.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Google"],"affectedVendorsRaw":["GPT-6 Astra","DaVinci Resolve","PixAI","OpenCut","Omegle","Google"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-22T13:11:29.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}