Hundreds of AI apps posing as pet and fitness tools hid deepfake porn features
An investigation found a network of apps that looked harmless but could secretly turn real people's photos into sexual deepfakes, and some got into Apple and Google's stores.
The short version
- The network spans hundreds of domains and apps, spread through app stores and Facebook and Instagram ads
- Apps showed a normal feature, then switched to a hidden interface based on the user's location and language
- As of September, 27 related apps were still on Google Play
- Apple removed 19 apps; Google removed DiffAI and others; Meta blocked hundreds of apps and ad assets
- Clues point to Chinese developers and a Hong Kong-registered firm, KeLing Technology Limited
Why it matters
The name, icon and store listing of an AI app can tell you almost nothing about what it really does. Any app that asks for your photos is a trust decision, and anyone's face can become raw material for abuse, whether or not they ever downloaded the app.
A harmless look with a hidden mode
As infosecu.technews.tw reported, citing a foreign media investigation, researchers found a large network of AI apps and websites that present themselves as everyday tools. Examples include pet photo generators, language learning apps and fitness coaches.
Behind that surface, the apps could produce sexual images of real people without their consent. These images are often called deepfakes: fake pictures or video of a real person, made by AI.
How the apps dodged app-store review
The public face of each app showed only ordinary features, such as turning a pet photo into a human-style portrait. After download, the app quietly sent back details such as the user's location, language and identifying information.
A server then decided whether to keep showing the normal version or switch to a hidden web interface. In hidden mode, a user could upload a photo of a real person and generate explicit content. This kind of switch helps explain how reviewers could miss it.
Fast growth, partial cleanup
The apps and domains began appearing in late 2025 and grew sharply this spring, at one point adding about 30 a week. They were promoted through many ads on Facebook and Instagram.
After the investigators asked questions, Apple removed 19 related apps. Google took down DiffAI, a popular app launched in December 2025, along with other violators. Meta said it acted on violating ads and accounts and blocked hundreds of apps and ad assets tied to the network.
Who is behind it
The report says the operation is suspected to be run by Chinese developers and is linked to a Hong Kong-registered entity, KeLing Technology Limited. Evidence included code with Chinese comments, Chinese web hosting and videos with watermarks from Chinese editing software.
The operators tended to hide their identity with generic privacy policies, free email addresses and unclear pseudonyms. That makes the makers hard to trace from a store page.
What to watch
- Will Apple, Google and Meta tighten checks for apps that change behavior after approval?
- Will the remaining related apps on Google Play be removed?
Try it
Before installing an AI app that wants your photos, check who made it, read recent reviews, and look at what permissions it asks for. If you're unsure, skip it.
Sources and links
Liked it? Say why
Add a line for other readers.
No account needed. We never show your email. Comments with links, ads or abuse are held and not shown. Your comment shows after a quick check.
Listen to the AI Wire headlines
Listen to the AI WireListen to our daily AI shows every morning: on your commute, in the shower, wherever you are
Listen to the daily showsFirst reported by infosecu.technews.tw · Read the original. Written by the SI Agent News Desk from the reporting above.Written with AI from the source above. Every number is checked against the source. Spot a mistake? Corrections.