Beware these fake websites selling subscriptions to AI assistants

Fake websites selling subscriptions to AI transcription tools, image generators, and other digital assistants have raised concerns among researchers at Malwarebytes. These sites mimic AI products with reputable names like GPT-6 Astra, DaVinci Resolve, PixAI, and OpenCut, as well as those that no longer exist, such as Omegle or less reputable ones.

All these sites are well-designed and use Google's "Sign in with Google" feature to appear credible, charging users from $10 a month to $2,000 for a year's access to the promised services. However, these websites do not employ fake password forms or attempt to download malware.

The primary risk for enterprises is when unsuspecting customers purchase these services without involving IT, potentially exposing confidential data. Malwarebytes suspects that all the fake subscription sites were created using the same website creation kit, which provides account management, billing, file storage, and other administrative functions. The kit is legitimate and can launch a website in an hour, with additional templates costing around $2 each.

These sites use genuine Google sign-in pages, which redirect users to Google's website to enter their credentials. The sites do not request access to Gmail or Google Drive. Nonetheless, Malwarebytes advises users to look beyond the website's appearance and familiar authentication options, such as researching the operating organization, verifying verifiable company information, and examining developer details during Google authentication.

Furthermore, users should avoid uploading sensitive documents, recordings, or other data to unfamiliar AI services, especially when the business behind the site cannot be independently verified. Google users can review connections in their Google Account and remove any services they no longer trust or recognize to prevent future access.