/
← Voltar ao feed
low

Guidance on 'nudify' deepfake apps: legal status, prevention and response to AI-generated non-consensual intimate imagery

1 fonte(s) · 1 atualização(ões) · publicado 18/09/2026 06:00 · coletado há 1 dia

ESET WeLiveSecurity published a guidance article on 'nudify' apps, which use generative AI to turn images of clothed people into synthetic nude images. The resulting non-consensual intimate imagery (NCII) is used by fraudsters, bullies and cybercriminals, including for blackmail. An Institute for Strategic Dialogue (ISD) and AI Security Institute (AISI) study cited in the article identified 181 nudify websites receiving about 40 million unique visitors per month, with referral traffic from YouTube (1.8M), X (1.3M), Reddit (691K) and Facebook (464K). The article is awareness and advice content and describes no specific incident, vulnerability or named threat actor.

Technical Details

  • Nudify apps use generative AI to create synthetic content and blend it with the original photo.
  • Attackers need source images, so exposure comes from public social media profiles, other publicly available photos, account compromise, and malicious or untrustworthy apps that collect uploaded images.
  • The article cites a 2025 report that nearly half of US teens have seen AI-generated explicit material.
  • Legal context: in the US the TAKE IT DOWN Act lets victims request platform removal within 48 hours, and sexualized images of minors are treated as CSAM under Title 18 of the US Code. The EU directive on combating violence against women will criminalize NCII, including AI-generated images, but must be transposed by member states.

Remediation

  • Restrict who can see photos and contact details on social media, and review which images of you or your family are publicly available.
  • Use unique passwords, 2FA and automatic updates. Do not upload images to AI or other apps unless essential, and do not assume apps on the main app stores are safe.
  • Talk to children about the risks so they feel safe coming forward.
  • If targeted, do not engage with the extortionist and preserve evidence (messages, usernames, URLs, screenshots, dates).
  • Request takedown from the hosting platforms and de-indexing from Google Search. Use StopNCII.org (adults) or the NCMEC Take It Down service (minors), which share image hashes with participating platforms.
  • Report blackmail and any victimization of minors to the authorities, for example the Cyber Tipline in the US.
  • Report offending apps to Apple (Report a Problem) or Google Play (flag as inappropriate).

Linha do tempo

  1. welivesecurity.com ↗ · pub. 18/09/2026 06:00 · coletado 19/10 18:00 primeiro registro

    Guidance on 'nudify' deepfake apps: legal status, prevention and response to AI-generated non-consensual intimate imagery

    ler a análise desta fonte

    ESET WeLiveSecurity published a guidance article on 'nudify' apps, which use generative AI to turn images of clothed people into synthetic nude images. The resulting non-consensual intimate imagery (NCII) is used by fraudsters, bullies and cybercriminals, including for blackmail. An Institute for Strategic Dialogue (ISD) and AI Security Institute (AISI) study cited in the article identified 181 nudify websites receiving about 40 million unique visitors per month, with referral traffic from YouTube (1.8M), X (1.3M), Reddit (691K) and Facebook (464K). The article is awareness and advice content and describes no specific incident, vulnerability or named threat actor.

    Technical Details

    • Nudify apps use generative AI to create synthetic content and blend it with the original photo.
    • Attackers need source images, so exposure comes from public social media profiles, other publicly available photos, account compromise, and malicious or untrustworthy apps that collect uploaded images.
    • The article cites a 2025 report that nearly half of US teens have seen AI-generated explicit material.
    • Legal context: in the US the TAKE IT DOWN Act lets victims request platform removal within 48 hours, and sexualized images of minors are treated as CSAM under Title 18 of the US Code. The EU directive on combating violence against women will criminalize NCII, including AI-generated images, but must be transposed by member states.

    Remediation

    • Restrict who can see photos and contact details on social media, and review which images of you or your family are publicly available.
    • Use unique passwords, 2FA and automatic updates. Do not upload images to AI or other apps unless essential, and do not assume apps on the main app stores are safe.
    • Talk to children about the risks so they feel safe coming forward.
    • If targeted, do not engage with the extortionist and preserve evidence (messages, usernames, URLs, screenshots, dates).
    • Request takedown from the hosting platforms and de-indexing from Google Search. Use StopNCII.org (adults) or the NCMEC Take It Down service (minors), which share image hashes with participating platforms.
    • Report blackmail and any victimization of minors to the authorities, for example the Cyber Tipline in the US.
    • Report offending apps to Apple (Report a Problem) or Google Play (flag as inappropriate).