F6 and the RuStore app store have reported an increase in fraudulent activities involving artificial intelligence. Attackers are leveraging neural networks to automate hacking processes, identify system vulnerabilities, and develop malicious software. These tools are increasingly used to bypass security restrictions.
In late 2025, the hacker group GTG-1002 utilized AI agents, specifically Claude Code, to execute 80–90% of their tactical operations. Beyond automated attacks, criminals are distributing fake AI services disguised as popular assistants. These malicious applications are designed to steal user data and gain unauthorized control over mobile devices.
Fraudsters distribute these fake apps via SMS, email, and messaging platforms, often targeting users looking for free or cracked versions of AI tools. One specific scheme involves fake image search applications that prompt users to reboot their phones, followed by fake virus alerts and requests for banking codes.
To mitigate these risks, F6 and RuStore recommend downloading software exclusively from official stores or verified developer websites. Users are advised to treat any unexpected requests for banking credentials, verification codes, or remote access to their devices as a security red flag.



