Appleinsider Over 400 AI Apps Conceal Deepfake Abuse Tools in App Stores
Article Content
- •Over 400 AI apps were found to conceal deepfake generation tools behind benign interfaces.
- •The network is linked to a Hong Kong entity, KeLing Technology Limited, and has been operational for about a year.
- •Apple and Google have removed several apps, but the scale of the operation raises concerns about app store vetting processes.
An investigation by WIRED uncovered a network of over 400 AI applications that masquerade as benign services, such as pet portrait generators and fitness coaches, while secretly enabling users to create sexually abusive deepfake images and videos. These apps, linked to a Hong Kong-registered company called KeLing Technology Limited, passed Apple and Google’s app review processes by using a bait-and-switch tactic, where the apps initially display harmless content but can load explicit features based on user interactions. Apple has since removed 19 of these apps, including the pet portrait app Viefur, after being alerted to the issue. Meta also took action against thousands of ad accounts promoting these apps. The apps were reportedly able to accumulate hundreds of thousands of downloads, raising serious concerns about the effectiveness of current app vetting processes by major tech companies. The investigation highlights a significant gap in content moderation and enforcement capabilities on these platforms.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (14)
Following this threat?
Track Viefur and KeLing Technology Limited in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of apps are affected?
What actions have been taken against these apps?
How did these apps bypass app store reviews?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…