Cybercriminals Abuse Vibe Coding Service to Create Malicious Sites

Proofpoint researchers observed widespread abuse of the Lovable AI-powered website creation platform to host phishing pages, malware loaders, and crypto wallet drainers; tens of thousands of Lovable URLs and campaigns delivering hundreds of thousands of messages impacted thousands of organizations, including MFA-focused AiTM credential theft and payment-data harvesting. Lovable has taken down clusters, reported malicious sites, and introduced enhanced security controls, but the platform's ease-of-use has lowered the barrier for low-skill attackers to deploy convincing malicious sites quickly.