WIRED Investigation: Over 400 AI Apps Disguised as Daily Tools Hide Abusive Deepfake Features
WIRED uncovered a network of 400+ AI apps using bait-and-switch tactics to hide explicit deepfake generation capabilities behind benign interfaces, bypassing app store reviews and reaching hundreds of thousands of users.
A WIRED investigation published on November 2, 2026, revealed a network of more than 400 connected domains and applications that appear to be ordinary AI tools, such as the "pet portrait" generator Viefur, language tutors, or AI workout coaches. However, under specific conditions, these apps stealthily load web interfaces allowing users to generate sexually violent and child sexual abuse material (CSAM) deepfakes by uploading photos.
The network was discovered by researchers tracking links from thousands of video ads containing explicit deepfake content published on Meta’s Facebook and Instagram. These ads reached tens of thousands of people and prompted investigations by regulators worldwide. According to WIRED's review, the apps and domains appear to be operated by Chinese developers and linked to a Hong Kong registered entity called KeLing Technology Limited.
"This is an organized, commercially run operation: One operator behind hundreds of disposable apps and domains, cloaked to pass App Store review and pushed through tens of thousands of Meta ads under fake payer names," said Paul Bouchaud, lead researcher at the nonprofit AI Forensics. He added that the operators did not expect enforcement to catch up, and so far, it hasn't.
Technical analysis shows that each time an app is downloaded, it sends user location, language, and unique identifiers to a server. The server then determines whether to display the benign version or load the explicit deepfake web interface. One trigger appears to be downloading the app after clicking an associated ad on Meta’s platforms.