AI Website Generators Repurposed by Adversaries for Malware Campaigns

Adversaries are using AI-powered website builders to expedite the development of harmful infrastructure in a quickly changing threat landscape, hence reducing the entry barriers for malware distribution and credential phishing.

Platforms like Lovable, which enable users to generate fully functional websites via natural language prompts, have been observed in numerous campaigns since early 2025.

These tools, designed for ease of use with free hosting under the lovable[.]app domain, allow even novice actors to deploy sophisticated phishing kits, malware loaders, and fraud sites without advanced web development skills.

Emerging Threats in AI-Assisted Cybercrime

Proofpoint researchers have documented tens of thousands of malicious Lovable URLs in email traffic monthly, targeting organizations with lures impersonating trusted brands such as Microsoft, UPS, and cryptocurrency platforms.

This abuse highlights a shift where AI not only automates site creation but also embeds deceptive elements like CAPTCHAs and backend logic for data exfiltration, often routing stolen ...