Cybercriminals Abuse AI Website Creation App For Phishing
Proofpoint, Wednesday, August 20th, 2025
We are often asked about the impact of AI on the threat landscape. While we have observed that large language model (LLM) generated emails or scripts have so far had little impact, some AI tools are lowering the barrier for entry for digital crime. Take, for example, services that can create websites in minutes with the help of AI.
Cybercriminals are increasingly using an AI-generated website builder called Lovable to create and host credential phishing, malware, and fraud websites. Proofpoint has observed numerous campaigns leveraging Lovable services to distribute multifactor authentication (MFA) phishing kits like Tycoon, malware such as cryptocurrency wallet drainers or malware loaders, and phishing kits targeting credit card and personal information.
Lovable is a user-friendly application and website builder that makes it easy for people to create and deploy their designs using natural language prompts. People can write down, in text, their idea for a website, and Lovable automatically creates it. The app also provides hosting for created sites with the domain lovable[.]app.