Loading story…
Investigators identified more than 100 polished subscription websites likely operated by a single actor or closely connected group. The network impersonates brands and products including GPT-6 Astra, DaVinci Resolve, PixAI, OpenCut, and Omegle, while promoting unverifiable AI, voice-cloning, video-editing, and study-service offerings. Shared website-kit artifacts, identical content-derived filenames, and closely related free-webmail addresses in Google developer records link the sites operationally.
Rather than deploying malware or directly stealing Google credentials, the sites use legitimate Google OAuth sign-in workflows to collect basic profile information and funnel users into subscriptions priced from less than $10 monthly to more than $2,000 annually. Many reviewed sites lacked verifiable ownership details and a usable product trial, creating risks of deceptive charges, exposure of Google account data, and uploads of sensitive files to unverified operators.
Get the infrastructure and lures behind it.
2 events from the most recent confirmed update back to the earliest known activity.
Omegle, a chat service whose name was later used by a site in the subscription network, shut down in 2023.
Investigators identified more than 100 subscription websites apparently operated by one actor or closely connected group, linked by shared starter-kit artifacts, identical software filenames, and related Google developer contacts. The sites impersonate brands including GPT-6 Astra, DaVinci Resolve, PixAI, OpenCut, and Omegle, and use genuine Google OAuth flows before directing users to paid plans.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcemalwarebytes.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers reported a coordinated campaign dubbed **AiFrame** involving 30+ malicious Google Chrome extensions masquerading as AI assistants (impersonating tools like **ChatGPT**, **Claude**, **Gemini**, and **Grok**) that collectively reached roughly **260,000–300,000 installs**. The extensions were found to **steal credentials, API keys, email content/messages, and browsing data**, and multiple items remained available in the Chrome Web Store at the time of reporting. LayerX attributed the set to a single operation based on shared code structure, permissions, and common command-and-control infrastructure under **`tapnetic[.]pro`** (including subdomains such as `claude.tapnetic.pro`). The extensions typically did not implement AI features locally; instead, they rendered a **full-screen iframe** that loaded remote content, enabling operators to change UI/logic and add capabilities without publishing an extension update. Reported high-install examples included **Gemini AI Sidebar** (`fppbiomdkfbhgjjdmojlogeceejinadg`, removed after reaching ~80k users) and apparent re-uploads/new IDs such as **AI Sidebar** (`gghdfkafnhfpaooiolhncejnlgglhkhe`, ~70k users), plus **AI Assistant** (`nlhpidbjmmffhoogcennoiopekbiglbp`, ~60k users, noted as having a “Featured” badge).
Jun 29, 2026
Attackers are increasingly impersonating popular AI brands to deliver malware and steal credentials, with Sophos reporting that fake installers and malicious browser extensions tied to names such as **ChatGPT**, **Claude**, **Copilot**, **Perplexity**, and **Gemini** now account for a significant share of confirmed AI-related incident cases. In a 12-month review of 86 MDR cases tagged for suspected AI activity, Sophos confirmed 38 as genuine adversarial AI incidents; 35 involved malicious targeting of AI, and 30 specifically involved AI software impersonation. The company said it found no confirmed cases of fully AI-orchestrated intrusions in its telemetry, indicating that the dominant threat remains conventional social engineering wrapped in AI branding. One recent case investigated by Darktrace used a fake **Google Gemini** installer to deploy the **Vidar** infostealer inside an EMEA company network. The campaign abused **Google Colab** as a trust-building lure before redirecting the victim to a fake "Windows Software Hub" page hosting `Download_Google_Gemini_For_Windows.exe`; the payload was a newer Go-compiled Vidar variant using Telegram-based infrastructure and the command-and-control domain `dtm[.]kijangturbo88[.]top`. Darktrace said the malware activity was consistent with browser credential theft and other data theft, and that it blocked the outbound communications and quarantined the affected device, underscoring the need for verified software sources, browser extension controls, supply-chain review, and better visibility into unmanaged systems.
Aug 21, 2026
OpenAI reported multiple cases of **malicious use of ChatGPT and related API access** spanning financially motivated fraud and government-aligned information operations, including romance scams, fake legal services, coordinated influence campaigns, and a state-linked harassment effort. In one detailed case (“**Operation Date Bait**”), actors used ChatGPT accounts and an API customer to generate ad copy for a fake dating service, drive victims to *Telegram*, and run semi-automated “missions” that required escalating payments; OpenAI said it banned accounts involved and noted the group’s claimed revenues could not be independently verified. OpenAI also described model use for translation, persona development, and internal coordination (e.g., generating status reports and assigning targets projected payout values), and cited evidence such as repeated text patterns posted by multiple X accounts. Google’s Threat Intelligence Group (GTIG) separately assessed that **nation-state threat actors** are operationalizing LLMs (including *Gemini* and other tools) for reconnaissance, victim targeting, and generating culturally fluent, multi-turn “rapport-building” phishing lures. GTIG also observed abuse of generative AI services’ public sharing features to host deceptive content used in **ClickFix** campaigns, where victims are tricked into copying and pasting malicious commands into a terminal; the activity was first observed in early December 2025. The reporting highlights a converging trend: adversaries are using LLMs to scale and localize social engineering while shifting delivery mechanisms toward trusted AI platforms and shared content features to increase credibility and reach.
Jun 29, 2026