Apple removes 19 apps over hidden deepfake functionality

Apple has pulled 19 apps from its App Store following reports that they were disguised as mundane services such as pet photography, language learning, and AI fitness coaching. The applications utilized dynamic server-side content to present different interfaces based on user location and language, a technique used to evade standard app review processes.

Security researchers identified that the developers engaged in post-approval content updates, a practice often referred to as "shell-swapping." This network reportedly used advertisements on Facebook and Instagram to drive traffic to the applications, with some promotional materials containing AI-generated sexual content involving minors.

In related actions, Google has removed the majority of the identified applications from the Google Play store, where they had collectively amassed over 350,000 downloads, with some marketed for all age groups. Meta confirmed it has taken enforcement actions against 11,600 ad accounts and prohibited 209 applications from running advertisements across its social media platforms.