乍一看，自封的"相片"应用Viefur似乎只是又一款AI sloop生成器。 使用4美元左右售出的数字硬币将购买130个硬币——相片可以变成一幅 " 人类形态的肖像 "，其中畜生穿 " 人的衣服 " 并被插入奇特的场景。 想着一个仓鼠穿着沙滩短裤，墨镜，和游荡在游泳池或夏威夷衬衫穿猫，喝从椰子。
所有这一切都是为了掩盖这个应用程序的真正目的：制造性虐待的深层假象。
WIRED调查发现，该应用是400多个连接域和应用程序网络的一部分，这些域和应用程序与Viefur一样，经常声称是日常服务——如语言学费或AI健身教练。 然而，当在某些条件下访问时，网络中的应用程序会偷偷地加载一个网络界面，允许使用相片用户上传生成清晰的AI性图像和视频。 应用程序包括人工智能场景，如 " 卧室强奸 " 和 " 有威胁的刀子 "，其中男子用刀指着妇女的脖子。
网络被多个研究者发现隐藏在一目了然，正如WIRED最近几个月所报道的那样，这些广告中有数百个包含AI生成了儿童性虐待材料，包括真实儿童的形象和一位欧洲王室成员。 广告覆盖了数以万计的人，并引发了世界各地监管机构的调查。
在每一种情况下，广告都与Apple和Google的应用商店中的欺骗性应用有关——允许人们用Apple和Google Pay生成清晰的图像并付款。 裸体应用软件背后的网络似乎已经出版了一年左右，有时每周出版数十个。 尽管Google,Apple，和Meta表示，他们执行的政策不允许其平台上有害的深假内容。
WIRED调查的应用软件和域名似乎由中国开发商和一个名为KeLing Technology Limited的香港注册实体经营，根据对网络域的回顾以及服务的运作方式。 与实体，app，及相关服务相链接的电子邮件地址没有回应WIRED的多条评论请求，但在被联系后，似乎抹去克林科技有限公司与深假工具之间的公共联系。
“这是一项有组织的商业经营活动：一个操作员在数百个可支配的应用软件和域名背后，隐形通过App Store审查，“他们并不期望执法会赶上
隐藏行为
下载深假网络中的应用程序之一，你可以看到广告内容的准确性，但在幕后，研究人员发现，应用程序正在悄悄地决定是显示良性内容，还是装入显示明显深层假象的网页界面。
" 每当应用程序下载时，都会给服务器打电话，提供一些信息，例如用户来自何处、语言、一些独特的标识，然后服务器回答是否显示其明确或非明确版本，" 解释Bouchaud，他把应用程序和相关网站的代码倒置。 他们表示没有明确列出一个用户为何可以显示一个应用程序的明确版本
与应用相关的网站揭示了网络的秘密及其运作规模。 开放其中一个应用网站可能会显示全黑屏幕，唯一显著的变化是URL更新包含“风险”一词。 但网站托管了每个应用程序中可以加载的隐藏的显性深假层。
这个网络界面包含数十个色情深层假象视频和图像模板，用户可以上传拟被添加到性场景的人的图像。 界面允许购买"diamonds"来生成图像并链接到其他社交媒体账户，用户可以通过这些账户与开发者联系询问或投诉。
网站代码中也隐藏了整个网络的细节。 研究者们说，JavaScript捆绑很容易被摘取，它包含一个由开发者创建的所有域和应用程序的清单——包括应用程序包细节，加密密钥，Facebook广告跟踪器等。
称 Maël Le Touz是安全公司Infoblox的员工威胁研究员，“它们使用相同的代码，彼此参照。”
Bouchard对何时注册域的分析发现，这些应用在2025年底开始出现，今年春季出现猛增。 研究者称在9月在Google的游戏商店现场直播了27起。 这些应用软件被集体下载了超过35万次
最受欢迎的应用程序之一"DiffAI"于2025年12月被创建，已经从"Play Store"下载了超过10万次。 Google的Play Store的用户评论称："这个应用程序包含创建CSAM和其他类型色情材料的模板。 它不进行年龄核实。”
DiffAI在WIRED联系Google关于网络的消息前不久被从游戏商店中移除。 Google没有回应WIRED的征求意见请求，尽管它在联系之前已经移除了大多数应用软件。 (丹麦记者于9月报道了深假网络的一些情况。 )
同样地，Apple在其App Store中移除了19个应用软件，包括宠物相片应用Viefur，此前WIRED询问了公司的活动和共享关联域。 称 Apple 发言人 Adam Dema。
」Dema 称。 “在得到批准后，他们的开发者将应用程序的内容从网站中抽出，用色情内容取代我们批准的内容，并通过第三方平台的色情广告加以宣传。” 称公司去年暂停了数以万计的应用软件
中国起源
“微调化”网络的核心似乎是许多中国开发商，其身份似乎被故意隐藏。 " 它使用独有的中文主机，代码用中文写出
整个网络的应用程序和域名经常使用通用隐私政策、Gmail或Outlook的免费电子邮件地址、以及模糊的开发者名称，Meta平台上张贴的应用广告也使用明显的假名-如Drewmondcreldbro Duhustepre和Swardmungsha Glasirdcroldshold等，自今年开始，Bouchaud 的研究在Meta的平台上发现数以万计的与网络相连的显性深假广告
“这些广告不仅违反了Meta的一些政策，“你看到什么，应用程序是什么广告，Paul 称技术公司需要回答一些问题，即应用程序产生的资金流向何方
KeLing Technology Limited似乎是这项业务的一个重要部分。 虽然该公司的网站只不过是个外壳，但其名称被列为第一个在网络注册的网站的联系方式。 这个网站的品牌名称也作为联系方式的一部分出现在了应用中所使用的明确深假模板中。 Bouchaud还发现了一个行政登录页面，该页面与“Keling”的明显深假界面相连接。 使用公司域名的电子邮件地址出现在至少一个被从应用商店删除的应用程序上。
9月底，向明确深假接口宣布的用户发送了可以使用新AI模型的通知——该模型被称作"Veyra"，在"更真实"的应用软件中有一个标记线。 更自然地说。 更狂野". 一个名为Veyra AI的网站的主页将其联系电子邮件列为KeLing Technology地址。
WIRED联系KeLing电子邮件地址时，然而，WIRED伸出援手后，有人将一些关联的在线社交媒体频道更名，从AI Veyra网站删除了KeLing电子邮件地址，从第一个注册的网站中删除了KeLing科技有限公司地址。
Meta 称公司在2025年禁止KeLing Technology Limited公司在“未遵守停止和停止信件”之后进行广告。 (Meta拒绝与WIRED分享信件，以法律理由). Meta 发言人称，Meta 称表示，克林科技有限公司虽然继续尝试以其他方式进行广告宣传，但在得知后会采取行动反对这些广告。
WIRED与Meta共享了400+域后，发言人称他们共享了3000多条与之相链接的相关广告，其中三分之二已经从它的系统中移除。 Meta后来告诉了WIRED已经针对11,600个广告账户采取行动，超过4,700个商业网页，5,200个用户，以及15,000个链接到域的网页，屏蔽了209个应用程序在其平台上的广告。
“背后的犯罪分子采取越来越欺骗性的步骤来逃避侦测——隐藏在假名和假身份后面，经营看起来是良性的广告，有时还连通了Google的和Apple的应用商店，广告的真实意图只在点击之后才透露出来，”发言人称。
随着WIRED完成报道这个故事，类似的广告和app继续被发表在技术平台上。
本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
At first glance, the self-proclaimed “pet portrait” app Viefur appears to be just another AI slop generator. Using digital coins sold in the app—around $4 will buy 130 coins—pet photos can be turned into an “anthropomorphic portrait,” with the critter dressed in “human clothing” and inserted into bizarre scenes. Think a hamster wearing beach shorts, sunglasses, and lounging in a swimming pool or a Hawaiian shirt-wearing cat, drinking from a coconut.
All of this is cover for what appears to be the app’s true purpose: creating sexually abusive deepfake images.
A WIRED investigation found the app is part of a network of more than 400 connected domains and apps that, like Viefur, often claim to be everyday services—such as language tuition or AI workout coaches. When accessed under certain conditions, however, apps in the network stealthily load a web interface allowing the generation of explicit AI sexual images and videos using photos users upload. The apps include AI scenes such as “bedroom rape” and “threatening knife,” where a man holds a knife to a woman’s neck.
The network was discovered hiding in plain sight, by multiple researchers, after they investigated links from thousands of video ads containing explicit deepfake content that were published on Meta’s Facebook and Instagram. As WIRED has reported in recent months, hundreds of these ads contained AI generated child sexual abuse material, including images of real children and a member of a European royal family. The ads reached tens of thousands of people and have prompted investigations from regulators around the world.
In each case, the ads linked out to the deceptive apps in Apple and Google’s app stores—allowing people to generate explicit images and make payments using Apple and Google Pay. The network behind the nudify apps appears to have been publishing them for around a year, at times publishing dozens per week. This is despite Google, Apple, and Meta saying they enforce their policies that do not allow harmful deepfake content on their platforms.
The apps and domains investigated by WIRED appear to be run by Chinese developers and a Hong Kong registered entity called KeLing Technology Limited, according to a review of web domains and how the services operate. Email addresses linked to the entity, apps, and related services, did not respond to multiple requests for comment from WIRED, but after being contacted, they appeared to erase public connections between KeLing Technology Limited and the deepfake tools.
“This is an organized, commercially run operation: One operator behind hundreds of disposable apps and domains, cloaked to pass App Store review and pushed through tens of thousands of Meta ads under fake payer names,” says Paul Bouchaud, a lead researcher at the nonprofit AI Forensics, who investigated the network. “They don’t expect enforcement to catch up, and so far it hasn’t.”
Hidden Behavior
Download one of the apps in the deepfake network and you may see exactly what was advertised—such as an app to create AI pet pictures. But behind the scenes, researchers found, the apps are quietly making determinations about whether to show the benign content or load a web interface showing explicit deepfakes.
“Each time the application is downloaded, there is a call to the server with some information, such as where the user is coming from, the language, some unique identifier, and then the server replies whether or not to show the explicit or the non-explicit version of it,” explains Bouchaud, who reverse engineered the apps’ and associated websites’ code. They say there’s no clear list of reasons why one user may be shown the explicit version of an app, but one trigger appears to be downloading it after clicking an associated ad on Meta’s platforms.
Websites linked to the apps have revealed the network’s secrets and the scale that it operates on. Opening one of the apps’ websites will likely show an entirely black screen and no content. The only noticeable change is that the URL updates to include the word “risk.” But the websites host the hidden explicit deepfake layer that can be loaded in each app.
This web interface contains dozens of pornography deepfake video and image templates—with users able to upload images of people to be added to the sexual scenes. The interface allows the purchase of “diamonds” to generate images and links to other social media accounts where users can contact the developers with questions or complaints.
Also hidden in the websites’ code are details about the entire network. A JavaScript bundle that can easily be unpicked, researchers say, contains a list of all the domains and apps that have been created by the developers—including app package details, encryption keys, Facebook advertising trackers, and more.
“They contained this giant configuration list of other domains with different encryption keys,” says Maël Le Touz, a staff threat researcher at security firm Infoblox, who identified almost 500 linked domains. “They run the same code and they all reference one another.”
Bouchard’s analysis of when domains were registered found that the apps started to appear toward the end of 2025, with a spike during the spring of this year. At one point, around 30 nudify apps-websites were being registered each week, the researcher says, with 27 live on Google’s Play Store in September. These apps had been downloaded more than 350,000 times collectively and many were rated suitable for all age groups, Bouchard’s research says.
One of the most popular apps, called DiffAI, was created in December 2025 and has been downloaded more than 100,000 times from the Play Store. A user review on Google’s Play Store stated: “This app contains templates for creating CSAM and other types of pornographic material. It performs no age verification.”
DiffAI was removed from the Play Store shortly before WIRED contacted Google about the network. Google did not respond to WIRED’s request for comment, though it had removed the majority of the apps ahead of being contacted. (Portions of the deepfake network were reported on by Danish journalists in September.)
Similarly, Apple removed 19 apps from its App Store, including pet photo app Viefur, after WIRED asked the company about the activity and shared associated domains. “We designed the App Store to be a safe and trusted place for our users, and nudification apps and other pornographic content are strictly prohibited,” says Apple spokesperson Adam Dema.
“We review every app before it’s published, and these apps complied with our rules when we reviewed them,” Dema says. “After approval, their developers changed the website the app pulls its content from, replacing what we approved with pornographic content, and promoted it through pornographic ads hosted on a third-party platform.” The company says it has suspended tens of thousands of apps for using these “bait-and-switch” tactics over the last year and recently updated its app store rules to further restrict “nudify” tools.
Chinese Origins
Central to the “nudify” network appears to be a host of Chinese developers whose identities seem to have been intentionally hidden. “It’s using exclusive Chinese hosting, the code is written in Chinese and has a lot of comments in Chinese,” Le Touz says, noting explicit videos in ads posted to Meta’s platforms promoting the apps contained watermarks from Chinese-language video editing software.
The apps and domains across the network have often used generic privacy policies, free email addresses from Gmail or Outlook, and obscure developer names as part of their alleged efforts to hide their connections. Ads for the apps posted on Meta’s platforms have also used apparently false names—such as Draftmondcreldbro Duhustepre and Swaldmungsha Glasirdcroldshold—and pages with no followers. Since the start of this year, Bouchaud’s research has found tens of thousands of explicit deepfake ads linked to the network—often using similar language in their advertising copy—on Meta’s platforms.
“These ads violate not just one, but several of Meta’s policies,” says Katie Paul, the director of the Tech Transparency Project, who first uncovered the ads showing deepfake explicit depictions of minors. “There is no question about what you are seeing, what the app is advertising,” she says. Paul says tech companies need to answer questions about where money generated from the apps goes and how those behind the nudification apps and services constantly seem to bypass their content moderation and safety systems.
KeLing Technology Limited appears to be a significant part of the operation. While the company’s website is little more than a shell, its name was listed as the contact details of the first website registered in the network. This website’s brand name also appeared as part of the contact details within the explicit deepfake template that was used in the apps. Bouchaud also identified an administration login page linked to the explicit deepfake interface that mentions “Keling.” And email addresses using the company’s domain appeared on at least one app that have been removed from app stores.
Towards the end of September, a notification sent to users of the explicit deepfake interface announced that a new AI model could be used—the model was called Veyra, with a tagline in the apps of “More real. More natural. More wild.” The homepage of a website called Veyra AI listed its contact email as a KeLing Technology address.
When WIRED contacted KeLing email addresses, plus some of those listed in apps privacy policies, we received no response. However, after WIRED reached out, someone renamed some of the associated online social media channels, removed KeLing email addresses from the AI Veyra website, and removed the KeLing Technology Limited address from the first registered website.
Meta says it banned KeLing Technology Limited from advertising in 2025 after it failed to “comply with a cease and desist letter.” (Meta declined to share the letter with WIRED citing legal reasons.) “We have strict rules against promoting nudify apps and work aggressively to keep this material off our services,” a Meta spokesperson says. Meta says that while KeLing Technology Limited has continued to try and advertise through other ways, it takes action against the ads when it becomes aware of them.
After WIRED shared the 400-plus domains with Meta, the spokesperson said they had shared more than 3,000 associated ads linked to them, two-thirds of which it had already removed from its systems. Meta later told WIRED it has taken action against 11,600 ad accounts, more than 4,700 business pages, 5,200 users, and 15,000 pages linked to the domains, blocking 209 apps from advertising on its platforms.
“The criminals behind them take increasingly deceptive steps to evade detection—hiding behind fake names and identities, running ads that look benign, and sometimes linking to Google's and Apple's app stores, with the ads' true intent revealed only after a click,” the spokesperson says.
As WIRED finished reporting this story, similar ads and apps continued to be published on the tech platforms.
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.