Check Point: antidetect browsers hide large fake-account operations
Original title: Hackers Use AI-Powered Browsers to Hide Thousands of Fake Accounts and Bypass Security Detection
Kameleo, AdsPower, and MultiLogin can isolate profiles, mask fingerprints, and reuse stolen session cookies at scale.
Check Point Research says criminals use commercial antidetect browsers to run thousands of accounts that look like different people, devices, and locations. An October 20, 2026 report names Kameleo, AdsPower, and MultiLogin, which combine profile isolation, proxies, automation, and in some cases AI. The browsers are not called malware. Stolen cookies placed in a profile may resume a signed-in session without a new login.
Unconfirmed: Forum listings and researcher scenarios show possible misuse; no specific campaign infrastructure is identified.
- AdsPower advertises an MCP server linking language-model workflows to browser profiles.
- Named misuse includes account takeover, payment and ad fraud, phishing, and malware distribution.
- Check Point lists no file hashes, domains, or campaign IP addresses as indicators.
Impact: Fake profiles and stolen cookies enable account takeover and fraud
- 1.Review large-scale residential proxy use, fingerprint changes, and suspicious session-cookie patterns.
- 2.Check monitoring for access to an already authenticated session from an unexpected device or network.
- 3.Invalidate active sessions when an account is confirmed compromised.
- Products
- KameleoAdsPowerMultiLogin
- Organizations
- Check Point Research
From the original article
4 min read at cybersecuritynews.com
Cybercriminals are using AI-enabled “antidetect” browsers to manage large networks of fake online accounts while making each profile appear to come from a different person, device, or location. Check Point Research reported that these tools can help a single operator or small group run thousands of accounts across social media and other platforms, making it […]
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.