AI 'antidetect' browsers are making scams, fraud, and influence operations harder to spot

Cybercriminals are increasingly using antidetect browsers to disguise their devices and evade fraud detection systems, according to a new report by security experts Check Point Research (CPR). These browsers allow users to create isolated profiles with different digital fingerprints, enabling multiple accounts to appear as if they originate from separate devices.

This makes it easier for cybercriminals to manage social media accounts, e-commerce accounts, and run web scraping operations. However, these tools are also being used maliciously to scale scams, hijack accounts, and exploit fraud detection systems. Researchers found that Russian, Iranian, and Chinese hackers are primarily using antidetect browsers to leverage stolen session cookies, inject them into clean browser profiles, and operate accounts without detection.

They use these browsers to target banking accounts and cryptocurrency wallets, test payment credentials across e-commerce platforms, and create fake accounts in bulk for generating advertising revenue. The integration of Artificial Intelligence is making these operations easier to scale, as AI-powered workflows can connect with browser profiles and run automated tasks across multiple accounts.

This combination of antidetect browsers, AI account management, and AI-generated content creates a powerful tool for threat actors to run large, coordinated campaigns with minimal involvement. To combat this threat, security teams should focus on analyzing infrastructure elements, such as residential proxies, browser fingerprint inconsistencies, and unusual session-cookie patterns.

Social media platforms should also start monitoring the use of antidetect browsers to better understand how they bypass detection mechanisms, while companies should review their security systems to detect account takeovers involving stolen session cookies.