Skip to content
NewA calmer, faster ZeroHour
StoryResearchmedium

Antidetect browsers can hide thousands of fake accounts

3 sources · 3 articlesFirst reported Updated ()
What's new

October 21: Later reports add AdsPower’s 5,000-profile tiers, MCP clients Claude Desktop and Cursor rather than Gemini, and note the browsers are not malware and lack indicators.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Check Point says Kameleo, AdsPower and MultiLogin can run thousands of isolated profiles and reuse stolen session cookies.

Check Point Research says commercial antidetect browsers Kameleo, AdsPower and MultiLogin let one operator run thousands of isolated profiles while spoofing fingerprints and using proxies. Forum discussion and documented abuse include stolen cookies for banking and crypto wallets, account takeover, carding, fake loans, ad fraud, phishing and malware distribution. The browsers are not called malware, and stolen cookies may resume a signed-in session without a new login. AdsPower advertises an MCP server for language-model automation; GBHackers says the docs name Claude Desktop and Cursor, not Gemini. According to Check Point, Anthropic’s September 2026 report described similar use against crypto exchanges and financial marketplaces. Check Point lists no hashes, domains or campaign IPs.

Key facts
  • Tools examined are Kameleo, AdsPower and MultiLogin.
  • AdsPower enterprise tiers support more than 5,000 profiles on request.
  • Stolen cookies can resume authenticated sessions without a fresh login.
  • AdsPower MCP docs name Claude Desktop and Cursor, not Gemini.
  • Check Point published no file hashes, domains or campaign IP indicators.
  • Cited platforms include Facebook, Instagram, TikTok, YouTube, X and LinkedIn.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 20, 2026Check Point report names three antidetect browsers. · Cyber Security News

What each outlet adds

beyond the shared facts
  • Check Point ResearchNames cookie injection, Anthropic’s report and Meta’s CIB sources.
  • GBHackersAdds 5,000-profile tiers, BitM kits and MCP client names.
  • Cyber Security NewsSays the browsers are not malware and lists no indicators.
Products
KameleoAdsPowerMultiLogin
Organizations
Check Point ResearchAnthropicMetaCheck Point
Countries
RussiaIranChina

Coverage

oldest first · one row per article · UTC
  1. · 5d ago Check Point ResearchFirst report

    AI antidetect browsers used for fraud and influence operations

    Kameleo, AdsPower, and MultiLogin can feed LLM content into profiles and accept stolen session cookies.

  2. · 4d ago GBHackers

    Antidetect browsers plus AI automation can scale account fraud, Check Point says

    Check Point says Kameleo, AdsPower and MultiLogin profiles, proxies and stolen cookies can hide bulk fake accounts and phishing.

  3. · 4d ago Cyber Security News

    Check Point: antidetect browsers hide large fake-account operations

    Kameleo, AdsPower, and MultiLogin can isolate profiles, mask fingerprints, and reuse stolen session cookies at scale.