🚨Apple and Google Pull Nudify App Network Hiding 400 Domains

Your app store just let a deepfake porn network slip through

A pet portrait app called Viefur turned out to be a front for sexually abusive deepfakes. It's one node in a network of more than 400 connected domains and apps, and the whole thing has been running for about a year. Apple removed 19 apps after WIRED asked about the activity. Google pulled DiffAI from the Play Store shortly before WIRED contacted it. If you ship consumer apps, this is the part that should bother you. The apps decide server-side whether to show a benign screen or load an explicit web interface, based on location and a unique identifier. One trigger appears to be installing after clicking a Meta ad. That means a clean review build can behave completely differently in production, and store review alone won't catch it. The numbers are ugly. The apps were downloaded more than 350,000 times collectively, and DiffAI alone passed 100,000 Play Store installs. At peak, around 30 nudify sites were registered each week. Developer identities were hidden behind Gmail and Outlook addresses, generic privacy policies, and obscure names, with the parent entity tied to KeLing Technology Limited in Hong Kong.