乍一看，自封的“Pet肖像”应用Viefur似乎是另一个AI sloop生成器。 使用4美元左右售出的数字硬币将购买130枚硬币，以为仓鼠穿着沙滩短裤，墨镜，在游泳池或夏威夷衬衫穿戴的猫身上游荡，喝椰子酒。
所有这一切都是为了掩盖似乎该应用的真正目的：制造性虐待的深层假象。
WIRED调查发现，该应用是一个由400多个连接域和应用程序组成的网络的一部分，这些域和应用程序和Viefur一样，经常声称是日常服务——如语言学费或AI练习教练。 然而，当在某些条件下访问时，网络中的应用程序会偷偷地加载一个网络界面，从而可以使用照片用户上传的方式生成清晰的AI性图像和视频。 应用程序包括人工智能场景，如 " 卧室强奸 " 和 " 威胁性刀 "，其中男子持刀指着妇女的脖子。
网络被许多研究者发现，他们调查了数以千计的视频广告的链接，正如WIRED最近几个月所报道的，这些广告中有数百个包含AI生成的儿童性虐待材料，包括真实儿童的形象以及一位欧洲皇室成员。 这些广告深入了数万人，引发了全球监管部门的调查。
在每一种情况下，广告都与Apple和Google的应用商店中的欺骗性应用有关——允许人们用Apple和Google Pay生成清晰的图像并付款。 裸体应用软件背后的网络似乎已经发布约一年，有时每周发布数十篇。 尽管Google,Apple，以及Meta表示，他们执行的政策不允许在他们的平台上出现有害的深假内容。
WIRED调查的应用程序和域名似乎由中国开发商和一个名为KeLing Technology Limited的香港注册实体经营，根据对网络域及服务运作方式的回顾。 链接到实体，app，和相关服务的电子邮件地址没有响应WIRED的多个评论请求，但在被联系后，似乎抹去了KeLing Technology Limited和Deepfake工具之间的公共联系。
“这是一项有组织的商业经营活动：一个操作员在数百个一次性应用程序和域名背后，隐形通过App Store审查，“他们并不期望执法会赶上
隐藏行为
在深假网络中下载一个应用程序，你可能会看到广告内容，但在幕后，研究者发现，应用程序悄悄地决定是显示良性内容，还是加载显示明显深层假象的网页界面。
" 每当应用程序下载时，都会给服务器打电话，提供一些信息，例如用户来自何处、语言、一些独特的标识，然后服务器回答是否显示其明确或非明确版本，" Bouchaud解释说，他推翻了应用程序和相关网站的编码。 他们表示没有明确的列表说明为何一个用户可以显示一个app的明确版本
与应用程序相关的网站揭示了网络的秘密及其运作规模。 打开一个应用网站，唯一显著的变化是URL更新包含“风险”一词。 但网站托管了每个应用程序中可以加载的隐藏的显性深假层。
这个网络界面包含数十个色情深层假象视频和图像模板，用户可以上传要加入性场景的人的图像。 该界面允许购买“diamonds”来生成图像，并链接到其他社交媒体账户，用户可通过这些账户与开发商联系，提出问题或投诉。
网站代码中也有关于整个网络的细节。 一个JavaScript捆绑，很容易被摘取，研究人员说，包含一个列表
称 Maël Le Touz是安全公司Infoblox的员工威胁研究员，他发现了近500个链接域。 “它们使用同样的代码，它们相互参照。”
Bouchard对何时注册域的分析发现，这些应用在2025年底开始出现，今年春季出现猛增。 研究人员称于9月在Google的游戏商店现场直播27集。 这些应用程序被集体下载超过35万次
最受欢迎的应用程序之一，名为DiffAI，创建于2025年12月，已经从Play Store下载超过10万次。 Google的Play Store的用户评论说："这个应用程序包含创建CSAM和其他类型色情材料的模板。 它不进行年龄核实。”
DiffAI在WIRED联系Google有关网络的消息前不久被从游戏商店中移除。 Google没有回应WIRED的征求意见请求，虽然在联系之前它已经删除了大多数应用软件。 (9月丹麦记者报道了深假网络的一些情况。 )
同样，Apple在其App Store中移除了19个应用软件，包括宠物照片应用Viefur，此前WIRED询问了公司的活动情况和共享关联域。 称 Apple 发言人 Adam Dema。
」Dema 称。 “经过批准后，他们的开发者将应用程序从网站中抽取内容，用色情内容取代我们核准的内容，并通过第三方平台的色情广告加以宣传。” 称公司去年暂停了数以万计的应用软件
中国起源
“微调化”网络的核心似乎是许多中国开发商，其身份似乎被故意隐藏。 “它使用独家中文主机，代码用中文写成
整个网络的应用程序和域名经常使用通用隐私政策、Gmail或Outlook的免费电子邮件地址，以及模糊的开发者名称，作为他们所谓的隐藏其联系的努力的一部分。 Meta平台上张贴的应用广告也使用明显的假名——如Drewmondcreldbro Duhustepre和Swardmungsha Glasirdcroldshold——以及没有追随者的网页。 自今年开始，Bouchaud的研究在Meta的平台上发现了成千上万个与网络相连的明晰的深假广告——经常在广告副本中使用类似语言。
“这些广告不仅违反了Meta的几个政策，她的称表示，Paul 称科技公司需要回答关于应用程序产生的资金流向的问题
KeLing Technology Limited似乎是这项业务的一个重要部分。 虽然该公司的网站只不过是一个外壳，但其名称被列为第一个在网络注册的网站的联系方式。 这个网站的品牌名称也作为联系方式的一部分出现在了应用中所使用的明确深假模板中。 Bouchaud还发现了一个行政登录页面，该页面与提及“Keling”的明确深假界面相连。 使用公司域名的电子邮件地址出现在至少一个从应用程序商店删除的应用程序上。
9月底，向明确深假界面宣布的用户发出可以使用新AI模型的通知——该模型被称为Veyra，在“更真实”的应用软件中有一个标记线。 更为自然。 更疯狂。 一个名为Veyra AI的网站的主页将其联系电子邮件列为KeLing Technology地址。
WIRED联系KeLing电子邮件地址时，然而，WIRED伸出援手后，有人将一些关联的在线社交媒体频道重新命名，从AI Veyra网站删除了KeLing的电子邮件地址，从第一个注册的网站中删除了KeLing科技有限公司的地址。
Meta 称公司在2025年禁止KeLing Technology Limited公司在“未遵守停止和停止信件”之后发布广告。 (Meta以法律理由拒绝与WIRED分享信件). Meta 发言人称。 Meta 称表示，虽然KeLing Technology Limited继续尝试通过其他方式进行广告宣传，但是在得知这些广告后会对其采取行动。
在WIRED与Meta共享400+域后，发言人称他们共享了3000多个与之相关的相关广告，其中三分之二已经从它的系统中移除。 Meta后来告诉WIRED已经对11,600个广告账户采取行动，超过4,700个商业页面，5,200个用户，以及15,000个链接到域的页面，屏蔽了209个应用程序在其平台上的广告。
“他们背后的罪犯采取越来越欺骗性的步骤逃避侦查——隐藏在假名和假身份的背后，经营看起来是良性的广告，有时还连结Google的和Apple的应用商店，广告的真实意图只在点击后才透露，”发言人称。
随着WIRED完成报道这个故事，类似的广告和app也继续在技术平台上发布。
本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
At first glance, the self-proclaimed “pet portrait” app Viefur appears to be just another AI slop generator. Using digital coins sold in the app—around $4 will buy 130 coins—pet photos can be turned into an “anthropomorphic portrait,” with the critter dressed in “human clothing” and inserted into bizarre scenes. Think a hamster wearing beach shorts, sunglasses, and lounging in a swimming pool or a Hawaiian shirt-wearing cat, drinking from a coconut.
All of this is cover for what appears to be the app’s true purpose: creating sexually abusive deepfake images.
A WIRED investigation found the app is part of a network of more than 400 connected domains and apps that, like Viefur, often claim to be everyday services—such as language tuition or AI workout coaches. When accessed under certain conditions, however, apps in the network stealthily load a web interface allowing the generation of explicit AI sexual images and videos using photos users upload. The apps include AI scenes such as “bedroom rape” and “threatening knife,” where a man holds a knife to a woman’s neck.
The network was discovered hiding in plain sight, by multiple researchers, after they investigated links from thousands of video ads containing explicit deepfake content that were published on Meta’s Facebook and Instagram. As WIRED has reported in recent months, hundreds of these ads contained AI generated child sexual abuse material, including images of real children and a member of a European royal family. The ads reached tens of thousands of people and have prompted investigations from regulators around the world.
In each case, the ads linked out to the deceptive apps in Apple and Google’s app stores—allowing people to generate explicit images and make payments using Apple and Google Pay. The network behind the nudify apps appears to have been publishing them for around a year, at times publishing dozens per week. This is despite Google, Apple, and Meta saying they enforce their policies that do not allow harmful deepfake content on their platforms.
The apps and domains investigated by WIRED appear to be run by Chinese developers and a Hong Kong registered entity called KeLing Technology Limited, according to a review of web domains and how the services operate. Email addresses linked to the entity, apps, and related services, did not respond to multiple requests for comment from WIRED, but after being contacted, they appeared to erase public connections between KeLing Technology Limited and the deepfake tools.
“This is an organized, commercially run operation: One operator behind hundreds of disposable apps and domains, cloaked to pass App Store review and pushed through tens of thousands of Meta ads under fake payer names,” says Paul Bouchaud, a lead researcher at the nonprofit AI Forensics, who investigated the network. “They don’t expect enforcement to catch up, and so far it hasn’t.”
Hidden Behavior
Download one of the apps in the deepfake network and you may see exactly what was advertised—such as an app to create AI pet pictures. But behind the scenes, researchers found, the apps are quietly making determinations about whether to show the benign content or load a web interface showing explicit deepfakes.
“Each time the application is downloaded, there is a call to the server with some information, such as where the user is coming from, the language, some unique identifier, and then the server replies whether or not to show the explicit or the non-explicit version of it,” explains Bouchaud, who reverse engineered the apps’ and associated websites’ code. They say there’s no clear list of reasons why one user may be shown the explicit version of an app, but one trigger appears to be downloading it after clicking an associated ad on Meta’s platforms.
Websites linked to the apps have revealed the network’s secrets and the scale that it operates on. Opening one of the apps’ websites will likely show an entirely black screen and no content. The only noticeable change is that the URL updates to include the word “risk.” But the websites host the hidden explicit deepfake layer that can be loaded in each app.
This web interface contains dozens of pornography deepfake video and image templates—with users able to upload images of people to be added to the sexual scenes. The interface allows the purchase of “diamonds” to generate images and links to other social media accounts where users can contact the developers with questions or complaints.
Also hidden in the websites’ code are details about the entire network. A JavaScript bundle that can easily be unpicked, researchers say, contains a list of all the domains and apps that have been created by the developers—including app package details, encryption keys, Facebook advertising trackers, and more.
“They contained this giant configuration list of other domains with different encryption keys,” says Maël Le Touz, a staff threat researcher at security firm Infoblox, who identified almost 500 linked domains. “They run the same code and they all reference one another.”
Bouchard’s analysis of when domains were registered found that the apps started to appear toward the end of 2025, with a spike during the spring of this year. At one point, around 30 nudify apps-websites were being registered each week, the researcher says, with 27 live on Google’s Play Store in September. These apps had been downloaded more than 350,000 times collectively and many were rated suitable for all age groups, Bouchard’s research says.
One of the most popular apps, called DiffAI, was created in December 2025 and has been downloaded more than 100,000 times from the Play Store. A user review on Google’s Play Store stated: “This app contains templates for creating CSAM and other types of pornographic material. It performs no age verification.”
DiffAI was removed from the Play Store shortly before WIRED contacted Google about the network. Google did not respond to WIRED’s request for comment, though it had removed the majority of the apps ahead of being contacted. (Portions of the deepfake network were reported on by Danish journalists in September.)
Similarly, Apple removed 19 apps from its App Store, including pet photo app Viefur, after WIRED asked the company about the activity and shared associated domains. “We designed the App Store to be a safe and trusted place for our users, and nudification apps and other pornographic content are strictly prohibited,” says Apple spokesperson Adam Dema.
“We review every app before it’s published, and these apps complied with our rules when we reviewed them,” Dema says. “After approval, their developers changed the website the app pulls its content from, replacing what we approved with pornographic content, and promoted it through pornographic ads hosted on a third-party platform.” The company says it has suspended tens of thousands of apps for using these “bait-and-switch” tactics over the last year and recently updated its app store rules to further restrict “nudify” tools.
Chinese Origins
Central to the “nudify” network appears to be a host of Chinese developers whose identities seem to have been intentionally hidden. “It’s using exclusive Chinese hosting, the code is written in Chinese and has a lot of comments in Chinese,” Le Touz says, noting explicit videos in ads posted to Meta’s platforms promoting the apps contained watermarks from Chinese-language video editing software.
The apps and domains across the network have often used generic privacy policies, free email addresses from Gmail or Outlook, and obscure developer names as part of their alleged efforts to hide their connections. Ads for the apps posted on Meta’s platforms have also used apparently false names—such as Draftmondcreldbro Duhustepre and Swaldmungsha Glasirdcroldshold—and pages with no followers. Since the start of this year, Bouchaud’s research has found tens of thousands of explicit deepfake ads linked to the network—often using similar language in their advertising copy—on Meta’s platforms.
“These ads violate not just one, but several of Meta’s policies,” says Katie Paul, the director of the Tech Transparency Project, who first uncovered the ads showing deepfake explicit depictions of minors. “There is no question about what you are seeing, what the app is advertising,” she says. Paul says tech companies need to answer questions about where money generated from the apps goes and how those behind the nudification apps and services constantly seem to bypass their content moderation and safety systems.
KeLing Technology Limited appears to be a significant part of the operation. While the company’s website is little more than a shell, its name was listed as the contact details of the first website registered in the network. This website’s brand name also appeared as part of the contact details within the explicit deepfake template that was used in the apps. Bouchaud also identified an administration login page linked to the explicit deepfake interface that mentions “Keling.” And email addresses using the company’s domain appeared on at least one app that have been removed from app stores.
Towards the end of September, a notification sent to users of the explicit deepfake interface announced that a new AI model could be used—the model was called Veyra, with a tagline in the apps of “More real. More natural. More wild.” The homepage of a website called Veyra AI listed its contact email as a KeLing Technology address.
When WIRED contacted KeLing email addresses, plus some of those listed in apps privacy policies, we received no response. However, after WIRED reached out, someone renamed some of the associated online social media channels, removed KeLing email addresses from the AI Veyra website, and removed the KeLing Technology Limited address from the first registered website.
Meta says it banned KeLing Technology Limited from advertising in 2025 after it failed to “comply with a cease and desist letter.” (Meta declined to share the letter with WIRED citing legal reasons.) “We have strict rules against promoting nudify apps and work aggressively to keep this material off our services,” a Meta spokesperson says. Meta says that while KeLing Technology Limited has continued to try and advertise through other ways, it takes action against the ads when it becomes aware of them.
After WIRED shared the 400-plus domains with Meta, the spokesperson said they had shared more than 3,000 associated ads linked to them, two-thirds of which it had already removed from its systems. Meta later told WIRED it has taken action against 11,600 ad accounts, more than 4,700 business pages, 5,200 users, and 15,000 pages linked to the domains, blocking 209 apps from advertising on its platforms.
“The criminals behind them take increasingly deceptive steps to evade detection—hiding behind fake names and identities, running ads that look benign, and sometimes linking to Google's and Apple's app stores, with the ads' true intent revealed only after a click,” the spokesperson says.
As WIRED finished reporting this story, similar ads and apps continued to be published on the tech platforms.
Auto-fetched and translated by AI Atlas. All rights belong to the original author.