Beware these fake websites selling subscriptions to AI assistants
- Published
- Record updated
Summary
Malwarebytes researchers found fake websites impersonating AI products such as GPT-6 Astra, DaVinci Resolve, PixAI and OpenCut, which charge visitors $10 a month up to $2,000 a year for access. The sites use genuine Google sign-in pages and ask users to upload documents or recordings, creating data exposure risk for enterprises whose staff buy them outside IT. The researchers suspect one operator is behind all the sites, which were built with the same commercial website creation kit.
Mitigation
Malwarebytes recommends looking beyond a site's design and familiar authentication options, checking who operates the service, looking for verifiable company information, and examining the developer details shown during Google authentication. It also advises users not to upload sensitive documents, recordings or other data to unfamiliar AI services, and to review and remove unrecognized connections in their Google Account.
Related items
- Infollm-gemini 0.37Same vendor · Simon Willison's Weblog
- InfoGoogle’s new Gemini model is better at understanding complicated questionsSame vendor · The Verge (AI)
- MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
- InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog
- InfoNo, AI agents did not discover a previously unknown Maya siteSame vendor · The Verge (AI)