Beware these fake websites selling subscriptions to AI assistants
Enterprise data is leaking through polished fake AI subscription sites. Shadow IT just got more dangerous.
Why it matters
Malwarebytes researchers exposed a coordinated scam network impersonating legitimate AI tools (GPT-6 Astra, PixAI, DaVinci Resolve) to harvest enterprise data and payment credentials. The threat is acute because users bypass IT approval to save budget, creating a blind spot for security teams.
The key facts
14 to knowFake sites charge $10/month to $2,000/year for fraudulent AI subscriptions
Multiple impersonated brands including GPT-6 Astra, DaVinci Resolve, PixAI, OpenCut, and defunct Omegle
Sites use genuine Google Sign-in authentication to appear legitimate
Researchers suspect single operator or group behind all identified sites; used identical website creation kit
Some sites request document, recording, or file uploads before 'unlocking' services
Shadow IT risk: employees avoid IT approval to get perceived budget deals; destination of harvested data unknown
Website creation kit is legitimate commercial offering; can launch site in ~1 hour, templates cost ~$2 each
Fake sites impersonate GPT-6 Astra, DaVinci Resolve, PixAI, OpenCut, and defunct Omegle
Pricing: $10/month to $2,000/year for promised access
All sites suspected to be operated by same person/group using identical website creation kit
Sites use genuine Google Sign-In pages; developer details show free webmail addresses instead of corporate domains
Some sites request file uploads (documents, recordings) before granting access
No malware downloads or fake password forms detected; threat is data exfiltration and payment fraud
Legitimate website creation kit used costs ~$2 per additional template after one-time purchase
Go to the source
Computerworldcomputerworld.com
Publisher excerpt: Websites offering fake subscriptions to AI transcription tools, image generators, and other digital assistants could be putting enterprise data at risk, according to researchers at Malwarebytes. The sites impersonate AI products with solid reputations, including GPT-6 Astra, DaVinci Resolve, PixAI…
