WIRED Finds 400+ Apps Hiding Deepfake Tools Behind Ordinary Services
Photo: Hippopx (public domain).
What happened. A WIRED investigation published on Monday 2 November 2026 has traced a network of more than 400 connected apps and roughly 500 linked domains that presented themselves as ordinary services — pet portrait makers, language tutors, workout coaches — while hiding tools for generating non-consensual explicit deepfake images and video.
How it worked. The mechanism, as WIRED and the researchers behind the findings describe it, was cloaking. The apps passed Apple and Google store review looking harmless. After installation, they contacted remote servers that decided which version of the app a user would see. Under certain conditions — including arriving via an advertisement — the app would load a hidden web interface offering deepfake generation from uploaded photos of real people.
The research came from two sources: Paul Bouchaud, lead researcher at the nonprofit AI Forensics, and Maël Le Touz, a threat researcher at Infoblox, who mapped nearly 500 linked domains sharing identical code configurations and cross-referenced encryption keys. The network appears to have started emerging in late 2025, registering as many as 30 new domain and app combinations per week at its peak, according to Bouchaud. In September 2026, researchers identified 27 related apps live on Google Play with more than 350,000 downloads combined; one app, DiffAI, had over 100,000 installs before Google removed it.
The platforms’ responses. Apple removed 19 apps, including the pet portrait app Viefur, after WIRED shared its findings. Apple spokesperson Adam Dema said the apps complied with store policies at initial review and that developers later changed the remote websites supplying their content, replacing approved material. Apple said it has suspended tens of thousands of apps over the past year for similar “bait-and-switch” tactics, and updated its App Review Guidelines on 16 October to explicitly cover AI-generated nonconsensual intimate imagery and hidden features. Google had removed most of the flagged apps before WIRED contacted the company, and did not respond to the outlet’s request for comment.
Meta’s role was advertising. The network promoted its apps through thousands of ads on Facebook and Instagram, sometimes linking directly to App Store and Google Play listings. Meta said it had banned the Hong Kong-registered entity linked to the network, KeLing Technology Limited, from advertising in 2025 after a cease-and-desist letter, and that after receiving the researchers’ dossier it acted against 11,600 ad accounts and blocked 209 apps from advertising. Researchers tied the infrastructure to Chinese-language codebases, Chinese hosting services and KeLing; the company did not respond to requests for comment, and WIRED reported that contact details linking it to the network were erased after it was contacted.
Two cautions. First, the 400+ figure is WIRED’s and the researchers’ count; Apple has not confirmed it. Second, WIRED reported that similar ads and apps were still appearing as its investigation concluded — removals addressed the apps identified, not necessarily the whole operation.
For ordinary users, the practical lesson is uncomfortable: an app store listing is a check of the app as submitted, not a guarantee about what a remote server will serve later. Apps that pull their content from the web, ask for photos, or arrive via an ad deserve more scrutiny than their cheerful store pages suggest — especially AI photo apps, where the gap between the advertised feature and a hidden one can be a single server-side switch.
Sources
- WIRED investigation, published 2 November 2026 (original paywalled), as reported by AI Weekly: https://aiweekly.co/alerts/wired-400-cloaked-ai-apps-hid-deepfake-tools-apple-pulls-19
- Silicon Report — “Wired finds over 400 domains and apps hid explicit AI features” (2 November 2026): https://www.siliconreport.com/wired-finds-over-400-domains-and-apps-hid-explicit-ai-features
- AppleInsider — “Hundreds of AI apps hid abusive deepfake tools from reviewers” (2 November 2026): https://appleinsider.com/articles/26/11/02/hundreds-of-ai-apps-were-part-of-a-network-hiding-sexually-abusive-deepfake-tools
