Malwarebytes Finds 100+ Fake AI Subscription Sites Using Genuine Google Sign-In
Summary
Malwarebytes found more than 100 sites built with a shared toolkit that imitate products and sell unverified subscriptions. They use genuine Google sign-in pages, which do not verify the service; researchers advise checking the site and developer details before paying.
Key points
- Malwarebytes found more than 100 sites linked by shared files and closely related developer details, suggesting a single operator or connected group.
- The sites imitate existing products or promote unfamiliar brands, then direct visitors through genuine Google sign-in pages to paid plans.
- Researchers said the examined sites did not use fake password forms or push malware downloads; Google sign-in requests basic profile details without Gmail or Drive access.
- Subscriptions range from under $10 a month to more than $2,000 a year; some sites request document or recording uploads before offering a product trial.
- The sites provide little verifiable information about their operators, and some retain template leftovers such as demo banners and generic testimonials.
- Malwarebytes recommends verifying the web address and official product listing, and checking the Google consent screen’s application name and developer details.
Article Details
- Event Type
- Scam network using imitation subscription websites
- Impact
- More than 100 sites built with a shared $249 toolkit imitate existing products or promote unfamiliar brands, directing visitors through genuine Google sign-in pages to paid plans costing from under $10 a month to over $2,000 a year. Some sites also request document or recording uploads. Researchers reported no fake password forms or malware downloads; the sites’ operators and the legitimacy of the subscriptions are difficult to verify.
Vendors
Products
DaVinci Resolvetoolkit to create polished fake subscription sites that imitate products like GPT-6 Astra, PixAI, DaVinci Resolve, and Omegle, then steer visitors to paid plans through genuine Google sign-in pages.GPT-6.1 Astraare using a $249 website toolkit to create polished fake subscription sites that imitate products like GPT-6 Astra, PixAI, DaVinci Resolve, and Omegle, then steer visitors to paid plans through genuine Google sign-inOmeglepolished fake subscription sites that imitate products like GPT-6 Astra, PixAI, DaVinci Resolve, and Omegle, then steer visitors to paid plans through genuine Google sign-in pages.OpenCutThe network includes sites that copy the names of existing products, among them GPT-6 Astra, DaVinci Resolve, PixAI, and OpenCut.PixAIa $249 website toolkit to create polished fake subscription sites that imitate products like GPT-6 Astra, PixAI, DaVinci Resolve, and Omegle, then steer visitors to paid plans through genuine Google sign-in pages.