Beware these fake websites selling subscriptions to AI assistants
Summary
Researchers have identified fake websites posing as legitimate AI assistants, such as transcription tools and image generators, that lure users into purchasing subscriptions. These sites often mimic popular AI products and use 'Sign in with Google' features to gain trust, potentially leading users to pay for services that do not exist or are fraudulent. The primary risk to enterprises is employees unknowingly exposing sensitive data by subscribing to these fake services outside of IT approval.
IFF Assessment
This article details a new scam that exploits user interest in AI tools to defraud them and potentially compromise enterprise data, posing a threat to defenders.
Defender Context
Defenders should be aware of this evolving phishing and social engineering tactic targeting employees interested in AI services. Awareness campaigns should highlight the risks of purchasing AI subscriptions from unverified sources, especially when sensitive company data could be involved. Organizations should reinforce policies against shadow IT and provide clear channels for employees to procure approved software and services.