[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-fraud-crews-use-adspower-and-other-antidetect-browsers":10,"sections":45},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":34,"tags":35,"sources":40,"feedback":44,"feedback_at":22,"cost_usd":44,"total_tokens":44},12022,"fraud-crews-use-adspower-and-other-antidetect-browsers","Fraud Crews Use AdsPower and Other Antidetect Browsers","Check Point Research says Russian, Iranian, and Chinese hackers use antidetect browsers, some now linked to AI models, to hijack accounts and scale fraud.","Criminals have started using antidetect browsers, software built to make one computer look like many, to hijack accounts and run fraud at scale, according to Check Point Research (CPR).\n\nCPR studied underground forum and criminal marketplace discussions and found that Russian, Iranian, and Chinese hackers are leading the activity. Most of the talk centers on Kameleo, AdsPower, and Multilogin, which CPR picked because they are repeatedly referenced in those spaces. GoLogin and Dolphin Anty are also among the better-known tools.\n\nThe browsers work by creating isolated profiles, each with its own fingerprint: screen resolution, operating system, fonts. Marketing agencies and affiliate marketers use them to manage many accounts without tripping alarms. Criminals use them mainly to exploit stolen session cookies, the small files that keep a user logged in. Injected into a clean profile, a stolen cookie lets an attacker take over the account. Banking accounts and crypto wallets are the favorite targets.\n\nCPR also found the browsers being used to test payment credentials across e-commerce sites, apply for loans under fabricated identities, pass Know Your Customer (KYC) checks, and create fake accounts in bulk for advertising revenue.\n\nThe AI layer is the newer part. AdsPower offers a Model Context Protocol (MCP) server, which lets large language models connect to browser profiles, and its automation marketplace sells templates for commenting, liking, and messaging across many accounts. CPR says this lets operators build up fake accounts over time with minimal involvement. CPR did not say how widely criminals use these AI features.\n\nThe cookie angle explains why this matters. A stolen cookie is already a logged-in session, so the attacker never needs the password, and a separate fingerprint makes that session look like an ordinary device. Because the software is sold openly for routine marketing work, the tool itself is a poor signal for defenders.\n\nCPR advises security teams to look at infrastructure rather than account behavior: residential proxies, fingerprint inconsistencies, and unusual session-cookie patterns. It also urges platforms to study how these browsers bypass their detection. Whether infrastructure signals hold up once AI makes the behavior look human too is the open question.","[\"antidetect-browsers\",\"fraud\",\"session-cookies\",\"ai\"]","2026-10-21T13:00:00.000Z","2026-10-21T14:24:52.482Z","2026-10-21T14:24:52.653Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The lede says CPR found antidetect browsers have 'become standard equipment' for fraud operations, but the source only says criminals 'have started using' them as part of their tech stack, so soften it to match; also the headline and dek imply AI integration across antidetect browsers when only AdsPower's MCP server and templates are cited, so name AdsPower there, and either drop or support the claim that fingerprint checks are 'one of the main tools' platforms use to spot bulk accounts.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"The lede now says criminals 'have started using' antidetect browsers, the headline and dek name AdsPower, and the unsupported fingerprint-checks claim is gone. But the line 'The source does not say how often criminals use those specific AI features... That is a meaningful gap' is meta-commentary about the source, so cut it or recast it as a plain statement such as 'CPR did not say how widely these AI features are used', and tighten the headline so it states the news more plainly.","security",[36,37,38,39],"antidetect-browsers","fraud","session-cookies","ai",[41],{"name":42,"url":43},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fai-antidetect-browsers-are-making-scams-fraud-and-influence-operations-harder-to-spot",0,{"sections":46},[47,51,55,60,65,70,75,80,85,90,95,100,105,110],{"name":48,"slug":39,"count":49,"latest_published_at":50},"AI",7063,"2026-10-22T17:59:20.000Z",{"name":52,"slug":34,"count":53,"latest_published_at":54},"Security",1042,"2026-10-22T15:11:26.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Policy","policy",571,"2026-10-22T16:00:29.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Deals","deals",558,"2026-10-22T13:00:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Hardware","hardware",288,"2026-10-22T17:25:00.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Consumer Tech","consumer-tech",281,"2026-10-22T14:09:11.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Science","science",215,"2026-10-22T16:37:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",142,"2026-10-22T16:05:08.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Software","software",140,"2026-10-22T18:01:29.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Dev Tools","dev-tools",122,"2026-10-21T16:00:00.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"General","general",96,"2026-10-22T16:00:00.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"Gaming","gaming",86,"2026-10-22T13:17:59.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":111,"slug":112,"count":113,"latest_published_at":114},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]