Connect with us

Tech News

Cybercriminals Abuse AI Website Creation App For Phishing

Published

on

phishing - proofpoint

Proofpoint, a leading cybersecurity and compliance company has released new findings uncovering how cybercriminals are exploiting AI-powered website builders to launch large-scale phishing and fraud campaigns.

We are often asked about the impact of AI on the threat landscape. While large language model (LLM) generated emails or scripts have had little impact, some AI tools are lowering the barrier for digital crime. Services that create websites in minutes with AI are being abused by threat actors.

Cybercriminals are increasingly using an AI-generated website builder called Lovable to create and host credential phishing, malware, and fraud websites. Proofpoint observed campaigns leveraging Lovable services to distribute multifactor authentication (MFA) phishing kits like Tycoon, malware such as cryptocurrency wallet drainers, and phishing kits targeting credit card and personal information.

Lovable is a user-friendly website builder that creates designs using natural language prompts and hosts them on lovable[.]app. While a useful tool for people with limited web design knowledge, Lovable is being exploited by cybercriminals to create websites distributed via phishing attacks. In April 2025, Proofpoint researchers confirmed that they could easily create fake websites impersonating major enterprises without encountering any guardrails.

Campaign details

Proofpoint has observed hundreds of thousands of Lovable URLs detected as threats each month in email data since February 2025, with increasing frequency each month.

 Tycoon Phishing Campaigns:  In February 2025, Proofpoint identified a campaign that impacted over 5,000 organizations. Messages contained lovable[.]app URLs that directed recipients to a landing presenting a math CAPTCHA which, if solved, redirected to a counterfeit Microsoft authentication page.

These sites were designed to harvest user credentials, multifactor authentication (MFA) tokens, and session cookies. Additional campaigns in June 2025 impersonated HR departments  with emails about employee benefits, following a similar attack chain.

phishing article - proofpoint 2

Payment and Data Theft:  In June 2025, Proofpoint detected a campaign impersonating UPS.  with nearly 3,500 phishing emails. Victims were directed to AI-generated UPS lookalike sites hosted on Lovable, which collected personal and payment information and posted stolen details to Telegram. Because Lovable allows free templates to be reused, even legitimate projects can be cloned and weaponized with a simple prompt. Proofpoint has also observed sites impersonating banks to steal credentials, often using Lovable redirects and CAPTCHAs.

Crypto Wallet Drainer

Proofpoint has observed campaigns targeting cryptocurrency platforms. In June, nearly 10,000 emails impersonated the DeFi platform Aave. Victims were redirected to Lovable-created websites mimicking Aave, prompting them to connect cryptocurrency wallets. The likely goal was to drain assets from connected wallets.

phishing article - proofpoint 2

Further investigation

Initially Proofpoint observed the Lovable pages being used as redirectors to malicious sites. Further research revealed that credit card harvesters built on Lovable sent stolen data directly to Telegram. Using just one or two prompts, Proofpoint researchers were able to create fully functional phishing sites  with deceptive language automatically suggested by the tool.Unlike responsible AI providers that block misuse, Lovable had no such safeguards.

 Conclusion

Some AI tools can significantly lower the barrier for cybercriminals, especially those focused on creating social engineering content to appeal to the end user. Historically, creating phishing websites required time and technical skill.  Now, automatic web creation tools allow attackers to focus on scaling their attacks and refining social engineering tactics.

Creators of such tools should implement safeguards to prevent exploitation. While legitimate users benefit from these apps, organizations should consider allow-listing policies around frequently abused platforms.

Tech News

VAST Data Partners with Google Cloud to Enable Enterprise AI at Scale Across Hybrid Cloud Environments

Published

on

Professional headshot of Cem Kul, General Manager of SO/ Ras Al Khaimah resort

VAST Data, the AI Operating System company, today announced an expanded partnership with Google Cloud, the first fully managed service for the VAST AI Operating System (AI OS), enabling customers to deploy the AI OS and extend a unified global namespace across hybrid environments. Powered by the VAST DataSpace, enterprises can seamlessly connect clusters running in Google Cloud and on-premises locations, eliminating complex migrations and making data instantly available wherever AI runs.

Enterprises want to run AI where it performs best, but data rarely lives in one place and migrating can take months and costs millions. Fragmented storage and siloed data pipelines make it hard to feed the AI accelerators with consistent, high-throughput access and every environment change multiplies governance and compliance burdens.

VAST and Google Cloud address this challenge by making data placement a choice rather than a constraint. In this recorded demonstration, VAST showcased the power of the VAST DataSpace to connect clusters across more than 10,000 kilometers, linking one in the United States with another in Japan. This configuration delivered seamless, near real-time access to the same data in both locations while running inference workloads with vLLM, enabling intelligent workload placement so organizations can run AI models on TPUs in the US and GPUs in Japan without duplicating data or managing separate environments.

“Together with Google Cloud, VAST is building a unified data and computing environment that extends to wherever a customer wants to compute and unleashes the potential of AI by unlocking access to all data everywhere,” said Jeff Denworth, Co-Founder at VAST Data. “Delivered as a managed AI Operating System on Google Cloud, customers can go from zero to production in minutes – we’re turning hybrid complexity into a single, intelligent fabric that provides fast access to data, regardless of where it resides to accelerate time to value for agentic AI.”

“Bringing VAST AI Operating System to Google Cloud Marketplace will help customers quickly deploy, manage, and grow the data solution on Google Cloud’s trusted, global infrastructure,” said Nirav Mehta, Vice President, Compute Platform at Google Cloud. “VAST can now securely scale and support customers on their digital transformation journeys.”

Powering Google Cloud TPUs with seamless data access and near-local performance

Recent performance results also show how the VAST AI Operating System connects seamlessly to Google Cloud Tensor Processing Unit (TPU) virtual machines, integrating directly with Google Cloud’s platform for large-scale AI. In testing with Meta’s Llama-3.1-8B-Instruct model, the VAST AI Operating System delivered model load speeds comparable to some of the best options available in the cloud, while maintaining predictable performance during cold starts.

These results confirm that the VAST AI OS is not just a data platform but a performance engine designed to keep accelerators fully utilized and AI pipelines continuously in motion.

“The VAST AI OS is redefining what it means to move fast in AI, delivering model load speeds comparable to cloud-native alternatives while providing the full power of an advanced, enterprise-grade AI platform,” said Subramanian Kartik, Chief Scientist at VAST Data. “This is the kind of acceleration that turns idle accelerators into active intelligence, driving higher efficiency and faster time to insight for every AI workload.”

With VAST on Google Cloud, customers can benefit from:

  • Deploy AI in Minutes, Not Months: Organizations can run production AI workloads on Google Cloud today against existing on-premises datasets without migration planning, transfer delays, or extended compliance cycles. Using VAST DataSpace and intelligent streaming, they can present a consistent global namespace of data across on-prem and Google Cloud instantly.
  • Reduce Data-Movement Costs: Stream only the subsets that models require to avoid full replication and reduce egress – cutting footprint and redirecting budget from data movement to AI innovation with infrastructure that is future-ready for the demanding AI pipelines in genomics, structural biology, and financial services.
  • Maximize Google Cloud Innovation with Flexible Data Placement: Choose what to migrate, replicate, or cache to Google Cloud while keeping one namespace and consistent governance by applying unified access controls, audit, and retention policies everywhere to simplify compliance and reduce operational risk. Leverage VAST DataStore and VAST DataBase to unify prep, training, inference, and analytics without rewiring pipelines.
  • TPU-Ready Data Path: Feed TPU VMs over validated NFS paths with optimized model loading and metadata-aware I/O, delivering fast, consistent warm-start performance and predictable behavior during cold-starts.
  • Build on a Unified Platform: The VAST AI Operating System delivers a DataStore, DataBase, InsightEngine, AgentEngine and DataSpace that scales across on-premises and Google Cloud environments and adapts to changing business needs without architectural rewrites, enabling data scientists to use a variety of access protocols with a single solution.
Continue Reading

Tech News

AUKEY PARTNERS WITH THE BROOKLYN NETS FOR AN ELECTRIFYING NBA SEASON

Published

on

Barclays Center arena interior during Cavaliers vs Nets NBA game with Aukey

AUKEY, a leading innovator in cutting-edge tech accessories, is proud to announce a multiyear partnership with the NBA’s Brooklyn Nets, beginning this 2025-26 NBA season. This collaboration is AUKEY’s first sports partnership, marking an exciting milestone for their expansion and reflecting their ongoing commitment to delivering high-quality, innovative technology experiences to a global audience.

Through this partnership, AUKEY will team up with the Brooklyn Nets to engage fans both on and off the court. Together, they’ve launched a non-commercial, limited-edition wireless power bank, the MagFusion M 5000 Brooklyn Nets Co-Branded Edition, combining the team’s bold identity with cutting-edge wireless charging technology.

Fans can participate in AUKEY’s social media giveaway activities for a chance to win one on Instagram and Facebook, keeping their energy flowing anytime, anywhere while enjoying exciting game moments.

MagFusion M 5000 Brooklyn Nets Co-Branded Edition

“We’re thrilled to partner with the Brooklyn Nets, a team that embodies creativity, resilience, and the spirit of New York,” said Jackey Li, CEO at AUKEY US. “At AUKEY, we power every moment with strength, endurance, and an unbreakable drive to keep innovating. The Nets share that same unstoppable spirit and we look forward to sharing that spirit of innovation and energy with basketball fans worldwide.”

AUKEY’s work with the Nets will extend in-arena at Barclays Center for the team’s home games, as well as on the team’s social media channels. This partnership represents a fusion of tech, sport, and culture and together, AUKEY and the Brooklyn Nets aim to unlock more power in every moment, from the court to the community, keeping fans charged for what’s next.

Continue Reading

Tech News

GCC COMPANIES ACHIEVE 30-SECOND PAYROLL PROCESSING WITH 100 PER CENT ACCURACY USING ADVANCED HRMS, REVEALS GREYTHR

Published

on

Girish Rowjee, Co-founder and CEO of greytHR

Companies across the GCC region have experienced higher workforce management efficiency using advanced AI-powered HRMS, reporting 100 per cent accuracy and stronger compliance with GCC labour regulations, reveals a recent survey conducted by greytHR, the leading full-suite Human Resource Management System (HRMS) platform. Notably, organisations with around 1000 employees could complete their payroll processing in just about 30 seconds using the innovative platform. 

The findings point to an exponential shift within the GCC HR landscape, where organisations are embracing intelligent automated HR operations amid evolving labour regulations, hybrid work models, and the rise of multi-country workforces. The company’s data shows that 75 per cent of GCC companies are first-time HR automation adopters, while 24 per cent have migrated from legacy systems, highlighting the ongoing regional transition towards fully digitised, compliance-ready HR frameworks.

greytHR is powering this digital shift through its robust cloud-based infrastructure and AI-powered tools, which simplify the entire hire-to-retire employee lifecycle, from recruitment and onboarding to core HR, leave, attendance, payroll, performance, exit and engagement.

Girish Rowjee, Co-founder and CEO of greytHR, said, “At greytHR, we believe that ‘people’ are the primary pillar of any business. A company’s growth relies on the dedication and hard work of its employees. As a result of this belief, we built our HRMS to make employee lifecycle management simpler, more transparent, and more connected within the HR ecosystem. Our goal is to help organisations reinvent how they manage and support their workforce through intelligent, people-focused automation in today’s digital world.”

Through it’s a highly intelligent and unified system, greytHR has been continuously addressing the region’s distinctive challenges and maximising impact through efficient workforce management.

Sayeed Anjum, Co-Founder & CTO, greytHR, said: “As companies expand across borders and hybrid work models become the norm, HR leaders face issues such as manual payroll errors, fragmented systems and limited automation, which can directly impact compliance, employee satisfaction, and productivity. Our platform is tailored to address these pain points and the region’s unique needs by serving as an intelligent, unified system that simplifies all stages of workforce management. This further aligns with our broader vision of creating measurable impact for companies and transforming the regional HR ecosystem through digitisation.”

He further stated: “Currently, IT & ITeS, Business, and Financial Service sectors lead in HRMS adoption, at 19 per cent, 15 per cent and 10.5 per cent respectively, highlighting the vital role of technology-driven and service-oriented businesses in catalysing the ongoing digital HR revolution.”

greytHR offers built-in compliance features tailored to GCC nations, including automated GPSSA deductions, multi-country payroll capabilities, and real-time analytics. Moreover, its intuitive interface and modular architecture make it accessible to businesses of all sizes, from startups to large enterprises.

The company showcased these advanced offerings at the recent HR Summit & Expo 2025, held in Dubai, highlighting its commitment to supporting the region’s evolving workforce needs. As GCC continues to position itself as a global business hub, greytHR remains steadfast in its efforts to positively shape the future of the regional HR industry.

Continue Reading

Trending

Copyright © 2023 | The Integrator