logo

Scammers leave AI fingerprints all over fake antivirus renewal page

ID: 2733cd8b-0d38-524b-bfeb-477eec62d0e7

STIX ID: report--2733cd8b-0d38-524b-bfeb-477eec62d0e7

Feed Name: Help Net Security

Threat Score
45/100

Date Published: 2026-09-17

Date Updated: 2026-09-17

Author: Sinisa Markovic

...
...

Malwarebytes discovered a convincing fake Avast "renewal" web page targeting Belgian users that displays a bogus subscription charge and asks for a name, email, and phone number; collected numbers are used for follow-up phone scams and to persuade victims to install remote-access software. Code comments and artifacts indicate the page was likely AI-assisted and possibly an unfinished template intended for resale, illustrating how AI lowers the barrier for producing polished scam pages.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.