Connect with us

Tech News

Cybercriminals Abuse AI Website Creation App For Phishing

Published

on

phishing - proofpoint

Proofpoint, a leading cybersecurity and compliance company has released new findings uncovering how cybercriminals are exploiting AI-powered website builders to launch large-scale phishing and fraud campaigns.

We are often asked about the impact of AI on the threat landscape. While large language model (LLM) generated emails or scripts have had little impact, some AI tools are lowering the barrier for digital crime. Services that create websites in minutes with AI are being abused by threat actors.

Cybercriminals are increasingly using an AI-generated website builder called Lovable to create and host credential phishing, malware, and fraud websites. Proofpoint observed campaigns leveraging Lovable services to distribute multifactor authentication (MFA) phishing kits like Tycoon, malware such as cryptocurrency wallet drainers, and phishing kits targeting credit card and personal information.

Lovable is a user-friendly website builder that creates designs using natural language prompts and hosts them on lovable[.]app. While a useful tool for people with limited web design knowledge, Lovable is being exploited by cybercriminals to create websites distributed via phishing attacks. In April 2025, Proofpoint researchers confirmed that they could easily create fake websites impersonating major enterprises without encountering any guardrails.

Campaign details

Proofpoint has observed hundreds of thousands of Lovable URLs detected as threats each month in email data since February 2025, with increasing frequency each month.

 Tycoon Phishing Campaigns:  In February 2025, Proofpoint identified a campaign that impacted over 5,000 organizations. Messages contained lovable[.]app URLs that directed recipients to a landing presenting a math CAPTCHA which, if solved, redirected to a counterfeit Microsoft authentication page.

These sites were designed to harvest user credentials, multifactor authentication (MFA) tokens, and session cookies. Additional campaigns in June 2025 impersonated HR departments  with emails about employee benefits, following a similar attack chain.

phishing article - proofpoint 2

Payment and Data Theft:  In June 2025, Proofpoint detected a campaign impersonating UPS.  with nearly 3,500 phishing emails. Victims were directed to AI-generated UPS lookalike sites hosted on Lovable, which collected personal and payment information and posted stolen details to Telegram. Because Lovable allows free templates to be reused, even legitimate projects can be cloned and weaponized with a simple prompt. Proofpoint has also observed sites impersonating banks to steal credentials, often using Lovable redirects and CAPTCHAs.

Crypto Wallet Drainer

Proofpoint has observed campaigns targeting cryptocurrency platforms. In June, nearly 10,000 emails impersonated the DeFi platform Aave. Victims were redirected to Lovable-created websites mimicking Aave, prompting them to connect cryptocurrency wallets. The likely goal was to drain assets from connected wallets.

phishing article - proofpoint 2

Further investigation

Initially Proofpoint observed the Lovable pages being used as redirectors to malicious sites. Further research revealed that credit card harvesters built on Lovable sent stolen data directly to Telegram. Using just one or two prompts, Proofpoint researchers were able to create fully functional phishing sites  with deceptive language automatically suggested by the tool.Unlike responsible AI providers that block misuse, Lovable had no such safeguards.

 Conclusion

Some AI tools can significantly lower the barrier for cybercriminals, especially those focused on creating social engineering content to appeal to the end user. Historically, creating phishing websites required time and technical skill.  Now, automatic web creation tools allow attackers to focus on scaling their attacks and refining social engineering tactics.

Creators of such tools should implement safeguards to prevent exploitation. While legitimate users benefit from these apps, organizations should consider allow-listing policies around frequently abused platforms.

Tech News

Cambridge Health Group and Heriot-Watt University to advance research and innovation in the GCC

Published

on

Cambridge Health Group (“CHG an international specialist healthcare group providing post-acute care and a subsidiary of Amanat Holdings PJSC (“Amanat”), has signed a three-year Memorandum of Understanding (MoU) with Heriot-Watt University (“Heriot-Watt”) to advance academic research in rehabilitation, long-term care and specialised care.

The agreement brings together CHG’s clinical expertise in long-term care and post-acute rehabilitation across six facilities in the UAE and Saudi Arabia with Heriot-Watt University’s pioneering research in healthy ageing, rehabilitation robotics and assistive technologies. Through its Global Research Institute in Health and Care Technologies and the National Robotarium, Heriot-Watt combines expertise in engineering, artificial intelligence and behavioural science to address complex challenges in health and care. Heriot-Watt’s global presence spans five campuses across Scotland, Dubai and Malaysia, with plans to establish a further campus in Saudi Arabia.

Together, the organisations will connect research with clinical practice, creating opportunities to develop and evaluate innovations that support rehabilitation, maximise independence and improve quality of life for people with complex, long-term care needs. The partners will also pursue national and international research grants, including collaboration with government and industry partners.

The partnership will also support the development of the region’s specialist healthcare workforce through academic training, executive education and tailored development programmes. These will include postgraduate research supervision, internships, industry placements and mentoring, helping connect academic learning with practical experience.

Professor Dame Heather McGregor, member of Heriot-Watt University’s Executive, said: “Universities have an important role in ensuring that research responds to the needs of society and that its benefits extend beyond academia. Our partnership with Cambridge Health Group brings our researchers closer to the questions and challenges shaping healthcare practice, creating opportunities to translate knowledge into meaningful improvements in care. Through education, professional development and practical experience, we look forward to supporting the skills and expertise the region will need as its healthcare sector continues to evolve. We look forward to doing meaningful work together.”

Wael K. Abdallah, Group Chief Executive Officer of Cambridge Health Group, said: “As healthcare systems across the region evolve, advancing specialised care will increasingly depend on our ability to connect research, clinical expertise and real-world healthcare needs. At Cambridge Health Group, we see research and innovation as important enablers of better care outcomes and the continued development of post-acute healthcare across the GCC. Our collaboration with Heriot-Watt creates opportunities to bring academic expertise closer to clinical practice, strengthen the capabilities of our workforce and contribute to the long-term advancement of the sector.”

The partnership represents a step towards translating research into practical advances in specialised care, with the potential to benefit patients, healthcare professionals and the wider sector.

Continue Reading

Tech News

Leading AI Builders Make Massive Commitments on VAST-Powered Infrastructure

Published

on

On the back of the biggest buildout in data infrastructure history, VAST Data, the AI Operating System company, today announced that it is at the center of many of the largest deployments in this space. In the first three quarters of the current fiscal year, just 14 of the more than 1,000 companies VAST serves have made more than $10 billion in aggregate commitments for VAST Data software and supporting platform hardware. The scale and breadth of these investments have no known precedent in the history of data infrastructure and signal that VAST is leading the world in this explosive buildout of superintelligent systems.

The VAST AI OS is the platform of choice for leading AI clouds and frontier AI labs to enable scalable AI training and inference. In 2026, the expansion of AI use cases and the realization of the value of superintelligent systems has reinforced the mandate for organizations to build with industrial-grade storage and database infrastructure to support GPUs and AI accelerators.

The progress VAST has made:

  • 14 customers have each committed over $100M in VAST Data-powered system build outs
  • Four of those 14 customers have each committed over $1B this year
  • VAST Data-powered systems now support 9 of the top 10 frontier AI labs

“Growth at this scale only happens when an entire industry is rebuilding at once,” said Renen Hallak, Founder and CEO of VAST Data. “That’s what the new AI stack is. It’s being built for models and agents, not people and applications, and data sits at the center of it. The companies building it at the largest scale, for people, agents and now robots, are choosing VAST to anchor it.”

Supply Aligned Through 2029

The scale of data capacity VAST’s partners are delivering is unprecedented, and is now representing a significant percentage of the overall global NAND flash produced for enterprise data centers. At a time of such extreme supply chain pressure, VAST is also now taking steps to ensure the next phase of superintelligent system buildout. Increased flash supply takes years to bring online due to the investments in NAND fabs.

Because VAST is partnered with so many of the world’s AI builders, VAST has unique visibility into where capacity demand is headed. The company has structured agreements with its supply chain partners to align more than 200 exabytes of flash capacity through 2029. This forward planning supports VAST’s scaling objectives for the next several years, maps to the growth outlook of its largest customers and helps the AI clouds, labs, enterprises and government organizations building on the VAST AI OS plan their infrastructure with confidence.

“Planning for hundreds of exabytes isn’t only about protecting our customers’ growth projections,” said Jeff Denworth, Co-Founder of VAST Data. “It’s about keeping flash available to hundreds of clouds, so that every AI builder, not just the largest, has the capacity it needs to build and compete.”

Continue Reading

Tech News

Cloudera to Tackle the Enterprise AI Governance Gap at GITEX Global 2026 

Published

on

Cloudera, the only data and AI platform trusted by organisations to bring AI to their data,  announced its participation at GITEX Global 2026, the Middle East’s premier technology showcase. 

As AI adoption accelerates across the Middle East, businesses must ensure their data is accessible, well governed, and secure to support AI advancements. Organizations who handle sensitive data carefully consider where AI workloads run and how data is managed across their public cloud, private cloud, and on-premises environments. 

The UAE’s focus on sovereign AI and a secure digital environment is driven by nationwide digital-first initiatives. The UAE’s cloud computing market is projected to reach $23 billion by 2032, due to numerous government mandates for sovereign cloud adoption across the public sector. 

Alongside these mandates, enterprises within the region are adopting similar sovereignty principles. Organizations are looking to transition their AI workloads from public clouds to private or on-premises environments. However, this migration exposes a critical infrastructure challenge as legacy systems often confine valuable information in isolated data silos. 

The impact of these silos is evident in Cloudera’s recent Data Readiness Index, which reveals that while 91% of IT leaders across EMEA express confidence in their data, only 26% report that it is fully governed. To dismantle these barriers and bridge the gap between AI and data readiness, Cloudera introduces Cloudera Anywhere Cloud, a modular hybrid platform engineered specifically for the agentic era. 

“Our participation at GITEX Global 2026 comes at a time when organisations are looking more closely at how they manage data and deploy AI,” said Ahmad Shakora, Group Vice President, Cloudera Middle East. “Our work with global technology providers and regional partners reflects the different requirements businesses face, from accessing AI models to managing data across hybrid and sovereign environments.” 

To further strengthen its regional ecosystem, Cloudera has forged strategic alliances, including Mistral AI, to assist Cloudera with delivering the hybrid data foundation essential for moving enterprise AI into more organisations. Supported by Cloudera’s Anywhere Cloud platform, this new offering by Cloudera helps equip organizations in the Middle East with a secure, localized platform needed to scale advanced AI securely and independently. 

Based on stand H15-E40, Hall No. S15, Cloudera will feature live demonstrations showing how enterprises can tackle persistent data governance and architectural challenges to allow organisations to utilise AI securely within their own organisations. 

Continue Reading

Trending

Copyright © 2023 | The Integrator