{"version":1,"type":"story","url":"https://digestai.news/story/malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat","json":"https://digestai.news/story/malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat.json","markdown":"https://digestai.news/story/malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat.md","slug":"malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat","headline":"Malwarebytes warns fake AI subscription sites could put enterprise data at risk","summary":"Researchers at Malwarebytes discovered a set of polished websites that masquerade as subscriptions to well‑known AI tools such as GPT‑6 Astra, DaVinci Resolve, PixAI and OpenCut. The sites charge users between $10 a month and $2,000 for a year, use genuine Google sign‑in pages, and sometimes ask visitors to upload documents or recordings to unlock the promised services.\n\nMalwarebytes said the fake sites do not host malware or fake password forms, but they collect credentials and potentially sensitive files. The researchers suspect a single actor or group runs all the sites, noting they were built with the same commercial website‑creation kit that costs a one‑time purchase plus about $2 per additional template. The kit provides account management, billing and file storage functions. Because the sites appear legitimate, enterprises may purchase them through shadow IT, exposing corporate data to an unknown destination.\n\nThe firm advises users to verify the operator of any AI service, check developer details shown during Google authentication, and avoid uploading sensitive data to unverified services. It also recommends reviewing and revoking unwanted Google app connections.","keyPoints":["Fake sites impersonate AI tools like GPT‑6 Astra, charging $10‑$2,000 per subscription.","Sites use real Google sign‑in but may collect uploaded documents and credentials.","Researchers believe a single group runs all sites using a $2‑per‑template website kit."],"whyItMatters":"Enterprises risk data leakage and shadow‑IT purchases when fake AI services appear legitimate, threatening corporate security and privacy.","category":{"slug":"enterprise","name":"Enterprise & Industry","url":"https://digestai.news/category/enterprise"},"entities":{"companies":["Malwarebytes","Google"],"models":["GPT-6 Astra"],"people":[]},"firstPublishedAt":"2026-09-22T03:40:00Z","updatedAt":"2026-09-22T03:40:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"computerworld.com","title":"Beware these fake websites selling subscriptions to AI assistants","url":"https://computerworld.com/article/4224903/beware-these-fake-websites-selling-subscriptions-to-ai-assistants.html","publishedAt":"2026-09-22T03:40:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"Malwarebytes warns fake AI subscription sites could put enterprise data at risk\", 22 September 2026, https://digestai.news/story/malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat","publisher":"Digest AI","title":"Malwarebytes warns fake AI subscription sites could put enterprise data at risk","datePublished":"2026-09-22T03:40:00Z","url":"https://digestai.news/story/malwarebytes-warns-fake-ai-subscription-sites-could-put-enterprise-dat"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}