Skip to content
Scammers Exploit Google Sign-Ins for Fake AI Subscription Services

Scammers Exploit Google Sign-Ins for Fake AI Subscription Services

First seen 22 Sep 2026, 17:33 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 22, 2026 at 19:25 UTC
  • Over 100 fraudulent sites selling AI subscriptions identified.
  • Sites use genuine Google sign-ins to appear trustworthy.
  • No independent verification of claims made by the sites.

A network of over 100 fraudulent websites has emerged, selling unverified AI subscriptions priced up to $2,000 annually. These sites utilize a $249 website toolkit and feature polished designs, including genuine Google sign-in screens, which mislead users into believing they are purchasing legitimate products. The sites impersonate well-known brands like GPT-6 Astra and DaVinci Resolve, while others promote obscure names with no verifiable history. Researchers from Malwarebytes have linked these sites through identical underlying files and developer details, indicating a single operator or closely connected group. The sites do not offer trial versions of their products and require users to upload personal documents for processing. This scheme raises significant concerns about consumer fraud and the difficulty in verifying the legitimacy of the services offered.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-16
CVE-2026-7273 published
A vulnerability was published that could potentially relate to the exploitation methods used in these scams.
Date unknown
2026-09-21
Malwarebytes reports on fraudulent AI subscription sites
More than 100 websites linked to a toolkit were found selling AI subscriptions, misleading users with polished designs and Google sign-ins.
Malwarebytes
2026-09-21
CVE-2026-7273 added to CISA KEV
CISA added CVE-2026-7273 to its Known Exploited Vulnerabilities catalog, indicating active exploitation.
Date unknown
2026-09-22
Helpnetsecurity covers fraudulent AI subscription sites
Scammers are using a $249 website toolkit to create convincing fake AI subscription sites, confirmed by Malwarebytes.
Helpnetsecurity

More articles in this cluster (2)

Following this threat?

Track Elsevier and CVE-2026-7273 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed