A WIRED investigation said the network included more than 400 connected apps and websites presented as ordinary AI services, with some capable of conditionally loading explicit deepfake interfaces.
What was confirmed
Apple removed 19 apps after WIRED shared its findings with the company. The removed apps included Viefur, an app presented as a tool for turning pet photos into “anthropomorphic portrait” images.
According to WIRED, Apple said the apps complied with its rules when reviewed, then changed the websites they retrieved content from after approval. Apple described this as a bait-and-switch tactic and said it had suspended tens of thousands of apps for similar conduct over the previous year.
Apple also updated its App Review Guidelines on October 16. The revised rules address AI-generated nonconsensual intimate imagery and hidden features. Apps must proactively prevent and remove such content, while developers can face removal from the App Store and developer program if they misrepresent an app during review, according to MLQ’s summary of the investigation.
Other platform responses reported by MLQ included Google removing most identified apps before being contacted. Meta, after receiving more than 400 domains from WIRED, said it identified over 3,000 associated ads and acted against 11,600 ad accounts, more than 4,700 business pages, 5,200 users and 15,000 pages.
What the investigation alleged
WIRED traced more than 400 connected domains and apps linked to Chinese-language developers and a Hong Kong registered entity called KeLing Technology Limited. That connection does not establish that every developer or operator was Chinese. KeLing did not respond to WIRED’s requests for comment.
The services were presented as pet portrait generators, language tutors and AI workout coaches. Under certain conditions, researchers found that the apps contacted a server with information including language, traffic source and a device identifier. The server then determined whether to show the advertised feature or an interface for generating explicit sexual images and videos from uploaded photographs.
Researchers identified hidden templates depicting sexual violence and threats, including a scene involving a knife. Users paid in-app credits or “diamonds” to generate content. Infoblox researcher Maël Le Touz told WIRED that he identified almost 500 linked domains through shared code and references.
The network reportedly began appearing in late 2025 and, at one point, registered about 30 apps and websites per week. In September, 27 related apps were live on Google Play and had more than 350,000 collective downloads, based on research by Paul Bouchaud of the nonprofit AI Forensics. DiffAI exceeded 100,000 downloads before Google removed it, according to MLQ.
Why this affects business visibility
The case shows that an app’s store description may not describe everything its remote server can display. Businesses distributing or promoting an app may wish to check its listing name, website, developer and current behavior.
Their review covered 28 federal and state laws in California, New York, Texas and Utah. The authors found that most laws focus on prosecuting individual creators and distributors, while technologies, platforms and economic incentives that enable mass production remain largely unregulated.
The report organizes the ecosystem into model, product deployment, distribution and human layers. App stores and search engines sit within the deployment layer, while social media and other public or private platforms support distribution. Business owners may wish to check where their information appears, who controls each listing and whether the description matches the current service.
For owners checking AI search visibility, BizScoreAI scores how visible a business listing is to AI search and shows what an AI agent found on the listing and website.
What to do now
- Inventory official and third-party listings. Search for the company name, product names, domain names and developer names across app stores, business directories, social platforms and partner websites. Record each URL and the owner or distributor associated with it.
- Check developer and distributor relationships. Determine who supplied the app, website, white-label service or listing. If the business only sold or distributed the product, document that role and compare it with the entities named in public records and the investigation.
- Compare names, URLs and ownership data. Check that each listing uses the correct business name, website and current product description. Flag profiles that point to a removed app, outdated domain, mismatched developer or service that no longer matches the listing.
- Preserve dated evidence. Save screenshots of each listing, including its description, developer information, website and visible product functions. Note the date and the platform so later changes can be documented.
- Request corrections and record unresolved references. Ask the relevant platform or directory owner to correct or remove an inaccurate entry. Keep a record of the request, response and any reference that remains unresolved for follow-up.
What remains unknown
Businesses should not treat a listing relationship as evidence that they knew about or participated in abusive activity.
Other questions also remain open. The source does not establish the precise trigger for every hidden interface, whether all 400 connected domains and apps behaved alike, or whether every removed app had reached users through Meta advertising.
For business owners, the useful conclusion is narrower: verify the relationship between the company, its app-store listings and the current live service. The network was large, the apparent functions could change after review, and businesses may wish to keep directory information accurate.
Sources and verification
- WIRED published the original investigation and reported Apple’s removal of 19 apps, Apple’s explanation of the bait-and-switch tactic and the research into the connected network.
- MLQ summarized platform responses, app and domain counts, download figures and changes to Apple’s App Review Guidelines.
- UC Berkeley CLTC published the policy analysis by Charlotte Yuan and Nada Madkour, including its review of 28 laws and its framework for the AI-powered NCII and CSAM ecosystem.
FAQ
How many apps did Apple remove?
Apple removed 19 apps after WIRED shared information about the network, including the pet-photo app Viefur.
How many apps and websites were connected?
WIRED traced more than 400 connected apps and websites. Infoblox researcher Maël Le Touz told WIRED that he identified almost 500 linked domains.
Why did Apple update its App Review Guidelines?
Apple updated the guidelines to address AI-generated nonconsensual intimate imagery and hidden features. The rules require apps to prevent and remove such content and allow removal of developers who misrepresent an app during review.
Try the business directory
BizScoreAI scores how visible a business is to AI search and shows what its listing looks like to the engines people ask. Open the business directory.
Sources
See our editorial disclaimer for how our articles are produced.
Run a free scan to see your AI Visibility Score, SEO rating, and local citation accuracy.