Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions – Help Net Security

Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions – Help Net Security

By Sinisa Markovic
Publication Date: 2026-09-22 08:54:00

Scammers are using a $249 website toolkit to sell unverified AI subscriptions worth up to $2,000 a year, and a genuine Google sign-in screen is what makes the sites convincing.

Malwarebytes found more than 100 websites built this way, all tied to the same toolkit and closely related developer details.

The network includes sites that copy the names of existing products, among them GPT-6 Astra, DaVinci Resolve, PixAI, and OpenCut. One site uses the name Omegle, the video chat service that shut down in 2023. Other sites promote brand names with no public history behind them.

A fake PixAI generator site (Source:Malwarebytes)

“The sites we examined did not use fake password forms or push malware downloads. Instead, they used polished product pages and genuine Google sign-in screens before directing visitors to paid plans. Someone visiting an imitation site could believe they were buying from the genuine provider. With the unfamiliar brands, it is difficult to establish who…