Apple has removed 19 applications from its App Store after investigators uncovered a network distributing abusive AI deepfake tools.
The November 2, 2026 investigation identified more than 400 connected apps and websites.
Many appeared to offer harmless services, including pet portraits, language lessons, and fitness coaching.
However, some secretly provided tools capable of creating sexually explicit images and videos using photographs of real people.
The discovery raises serious concerns about online safety and the effectiveness of app review systems.
How Developers Concealed Harmful Features
Investigators discovered that certain applications communicated with remote servers after installation.
These servers collected information such as language preferences, referral sources, and unique identifiers.
Consequently, developers could control which features appeared to different users.
Someone downloading an app normally might see a harmless interface.
However, users arriving through specific advertisements could access hidden deepfake generators.
Researchers also traced thousands of advertisements on Facebook and Instagram promoting these tools.
One application, Viefur, appeared to create AI portraits of pets.
Behind its ordinary interface, investigators discovered access to tools generating sexually explicit and violent scenarios.
Furthermore, shared code, advertising trackers, and encryption keys suggested a coordinated network.
Google Play Also Faces Security Concerns
The investigation extended beyond Apple’s ecosystem.
In September 2026, researchers identified 27 related applications on Google Play.
Together, these apps had accumulated more than 350,000 downloads.
Surprisingly, many carried ratings suitable for all age groups.
Investigators also discovered technical connections involving Chinese-language developers and Hong Kong-registered KeLing Technology Limited.
However, the evidence did not conclusively identify who controlled the entire operation.
Apple Explains How Apps Bypassed Reviews
Apple said the applications initially complied with App Store requirements.
According to spokesperson Adam Dema, developers later changed content delivered through external websites.
As a result, prohibited material appeared without requiring another app review.
Apple subsequently removed 19 applications, including Viefur.
Additionally, the company reported suspending tens of thousands of apps over the previous year for similar deceptive practices.
Stronger App Store Rules Target AI Abuse
On October 16, Apple strengthened its guidelines against nonconsensual intimate imagery and hidden functionality.
Guideline 1.2 now explicitly addresses AI-generated intimate content created without consent.
Meanwhile, Guideline 2.5.19 reinforces restrictions against concealed features activated after approval.
Nevertheless, remote content changes remain difficult to detect.
Ultimately, the investigation highlights the growing challenge of preventing AI misuse while protecting users across digital platforms.
