Quick Summary
Cybercriminals are using AI tools like Vercel to create convincing fake websites that impersonate established brands like Malwarebytes. Recent data shows over 18,000 holiday-themed domains were registered, with at least 750 confirmed as malicious. This trend highlights the ease with which attackers can exploit AI technology to conduct credential harvesting, payment fraud, and malware distribution, posing significant risks to users and organizations alike.
The Securityish Brief
Cybercriminals are increasingly leveraging AI website builders, such as Vercel, to create fake brand sites that closely mimic legitimate ones. A recent case involved a site at installmalwarebytes[.]org, which was designed to look like a genuine Malwarebytes page. The site was registered in 2019 and evolved over time to incorporate Malwarebytes branding, ultimately using AI tools to clone the original site’s layout and design.
During a three-month period leading up to the 2025 shopping season, researchers identified over 18,000 holiday-themed domains, with nearly 3,000 already hosting phishing pages or fraudulent storefronts. These fake sites are often used for credential harvesting, payment fraud, and distributing malware disguised as legitimate downloads.
Attackers enhance the visibility of these impersonating sites through SEO poisoning, ad abuse, and comment spam, making it difficult for users to distinguish between real and fake. The low barrier to entry for creating these sites means that even those with minimal technical skills can launch convincing scams.
Implications for Users and Organizations
This trend raises serious concerns about cybersecurity and privacy for everyday users and organizations alike. Users should be particularly vigilant when making online purchases, especially during high-traffic shopping seasons. The use of AI tools to create these clones means that traditional security measures may not be enough to protect against such sophisticated scams.
Organizations must also be proactive in monitoring for brand impersonation and educating their customers about potential risks. With the rapid evolution of AI technology, the potential for abuse is significant, and companies need to implement robust security measures to mitigate these threats.
As AI website builders continue to grow in popularity, it is crucial for both users and organizations to remain aware of the tactics employed by cybercriminals. By understanding how these scams operate, individuals can better protect themselves from falling victim to fraudulent schemes.
- Vercel: An AI-assisted app and website builder that has been abused to create phishing sites.
- Malwarebytes: A cybersecurity company that has been impersonated through cloned websites.
- SEO poisoning: A tactic used by attackers to boost visibility of fake sites in search results.
- Credential harvesting: The act of stealing user credentials through fraudulent sites.
- Payment fraud: A type of scam where attackers trick users into providing payment information on fake sites.
Key Takeaways
- Always verify the merchant details before completing any online payment to avoid suspicious transactions.
- Use a reliable, up-to-date anti-malware solution with web protection features to help block malicious sites.
- Do not click on links from comments, social media, or unsolicited emails; always navigate to vendor sites directly.
- Report any suspicious websites that impersonate legitimate brands to help protect others from scams.
- Regularly educate yourself about common online scams and phishing tactics to stay informed and vigilant.
Key Terms & Concepts
- Phishing: In this article, phishing refers to fraudulent attempts to obtain sensitive information by impersonating a legitimate brand.
- SEO poisoning: SEO poisoning is a tactic used by attackers to manipulate search engine results, making fake sites appear legitimate.
- Credential harvesting: Credential harvesting is the process of stealing user credentials through deceptive websites designed to look authentic.
- Malware: Malware refers to malicious software designed to disrupt, damage, or gain unauthorized access to computer systems.
- AI website builders: AI website builders are tools that use artificial intelligence to help users create websites quickly and easily, sometimes leading to misuse by cybercriminals.
Read the original article here: https://securityboulevard.com/2026/02/criminals-are-using-ai-website-builders-to-clone-major-brands/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
