这一切都是掩护，掩盖该应用看似真正的目的：制作性虐待深度伪造图像。
All of this is cover for what appears to be the app’s true purpose: creating sexually abusive deepfake images.
《连线》杂志的一项调查发现，该应用是一个由400多个关联域名和应用组成的网络的一部分，这些域名和应用与Viefur一样，常常声称是日常服务，例如语言辅导或AI健身教练。然而，在特定条件下访问时，该网络中的应用会偷偷加载一个网页界面，允许使用用户上传的照片生成露骨的AI性图像和视频。这些应用包含“卧室强奸”和“威胁刀”等AI场景，其中一名男子将刀架在一名女子的脖子上。
A WIRED investigation found the app is part of a network of more than 400 connected domains and apps that, like Viefur, often claim to be everyday services—such as language tuition or AI workout coaches. When accessed under certain conditions, however, apps in the network stealthily load a web interface allowing the generation of explicit AI sexual images and videos using photos users upload. The apps include AI scenes such as “bedroom rape” and “threatening knife,” where a man holds a knife to a woman’s neck.
该网络被多名研究人员在调查数千条包含露骨深度伪造内容的视频广告后，发现其隐藏在公众视野中，这些广告发布在Meta旗下的Facebook和Instagram上。正如《连线》杂志近几个月来报道的，其中数百条广告包含AI生成的儿童性虐待材料，包括真实儿童和一位欧洲王室成员的图像。这些广告触达了数万人，并促使全球各地的监管机构展开调查。
The network was discovered hiding in plain sight, by multiple researchers, after they investigated links from thousands of video ads containing explicit deepfake content that were published on Meta’s Facebook and Instagram. As WIRED has reported in recent months, hundreds of these ads contained AI generated child sexual abuse material, including images of real children and a member of a European royal family. The ads reached tens of thousands of people and have prompted investigations from regulators around the world.
在每个案例中，这些广告都链接到苹果和谷歌应用商店中的欺骗性应用，允许人们生成露骨图像，并使用Apple Pay和Google Pay进行支付。这些“裸体化”应用背后的网络似乎已经发布了大约一年，有时每周发布数十个。这发生在谷歌、苹果和Meta声称他们执行政策、不允许其平台上存在有害深度伪造内容的情况下。
In each case, the ads linked out to the deceptive apps in Apple and Google’s app stores—allowing people to generate explicit images and make payments using Apple and Google Pay. The network behind the nudify apps appears to have been publishing them for around a year, at times publishing dozens per week. This is despite Google, Apple, and Meta saying they enforce their policies that do not allow harmful deepfake content on their platforms.
WIRED（连线）对网络域名的审查以及这些服务运作方式的研究显示，经WIRED调查的应用程序和域名似乎由中国开发者以及一家名为科灵科技有限公司（KeLing Technology Limited）的香港注册实体运营。与该实体、应用程序及相关服务有关的电子邮件地址未回应WIRED的多次置评请求，但在被联系后，它们似乎抹去了科灵科技有限公司与这些深度伪造工具之间的公开联系。
The apps and domains investigated by WIRED appear to be run by Chinese developers and a Hong Kong registered entity called KeLing Technology Limited, according to a review of web domains and how the services operate. Email addresses linked to the entity, apps, and related services, did not respond to multiple requests for comment from WIRED, but after being contacted, they appeared to erase public connections between KeLing Technology Limited and the deepfake tools.
非营利组织AI Forensics的首席研究员保罗·布沙尔（Paul Bouchaud）调查了该网络，他表示：“这是一个有组织、商业化运营的操作：一个运营者操控着数百个用完即弃的应用程序和域名，通过伪装来通过App Store的审核，并以虚假的付款人名称通过Meta的数万条广告进行推送。他们不指望执法部门能追查上来，到目前为止也没有。”
“This is an organized, commercially run operation: One operator behind hundreds of disposable apps and domains, cloaked to pass App Store review and pushed through tens of thousands of Meta ads under fake payer names,” says Paul Bouchaud, a lead researcher at the nonprofit AI Forensics, who investigated the network. “They don’t expect enforcement to catch up, and so far it hasn’t.”
行为下载深度伪造网络中的某个应用程序，你可能会看到完全符合广告宣传的内容——例如一款用于创建AI宠物照片的应用程序。但研究人员发现，在幕后，这些应用程序正悄悄地决定是显示良性内容，还是加载一个展示露骨深度伪造内容的网页界面。
Behavior Download one of the apps in the deepfake network and you may see exactly what was advertised—such as an app to create AI pet pictures. But behind the scenes, researchers found, the apps are quietly making determinations about whether to show the benign content or load a web interface showing explicit deepfakes.
对这些应用程序及相关网站的代码进行逆向工程的布沙尔解释说：“每次下载该应用程序时，都会向服务器发送一个包含某些信息的请求，例如用户的来源地、语言、某些唯一标识符，然后服务器会回复是显示该应用程序的露骨版本还是非露骨版本。”他们表示，目前尚不清楚是什么原因导致某个用户被显示应用程序的露骨版本，但其中一个触发因素似乎是在点击Meta平台上的相关广告后进行了下载。
“Each time the application is downloaded, there is a call to the server with some information, such as where the user is coming from, the language, some unique identifier, and then the server replies whether or not to show the explicit or the non-explicit version of it,” explains Bouchaud, who reverse engineered the apps’ and associated websites’ code. They say there’s no clear list of reasons why one user may be shown the explicit version of an app, but one trigger appears to be downloading it after clicking an associated ad on Meta’s platforms.
与这些应用程序相关联的网站揭示了该网络的秘密及其运营规模。打开其中一个应用程序的网站，通常只会显示一片空白的屏幕，没有任何内容。唯一明显的改变是网址（URL）更新后包含了“风险（risk）”一词。但这些网站承载着隐藏的显性AI换脸（deepfake）层，可以在每个应用程序中加载。
Websites linked to the apps have revealed the network’s secrets and the scale that it operates on. Opening one of the apps’ websites will likely show an entirely black screen and no content. The only noticeable change is that the URL updates to include the word “risk.”But the websites host the hidden explicit deepfake layer that can be loaded in each app.
该网络接口包含数十个色情AI换脸视频和图片模板——用户可以上传人物图片，将其加入到性爱场景中。该界面允许购买用于生成图片的“钻石”，并链接到其他社交媒体账户，用户可以通过这些账户就问题或投诉与开发人员联系。
This web interface contains dozens of pornography deepfake video and image templates—with users able to upload images of people to be added to the sexual scenes. The interface allows the purchase of “diamonds” to generate images and links to other social media accounts where users can contact the developers with questions or complaints.
网站代码中还隐藏着有关整个网络的信息。研究人员表示，一个可以轻松解构的JavaScript代码包包含开发人员创建的所有域名和应用程序的列表——包括应用程序包详情、加密密钥、Facebook广告追踪器等。
Also hidden in the websites’ code are details about the entire network. A JavaScript bundle that can easily be unpicked, researchers say, contains a list of all the domains and apps that have been created by the developers—including app package details, encryption keys, Facebook advertising trackers, and more.
安全公司Infoblox的资深威胁研究员马埃尔·勒图兹（Maël Le Touz）说：“它们包含了其他域名的巨型配置列表，并带有不同的加密密钥。”他识别出了近500个关联域名。“它们运行相同的代码，并且都相互引用。”布沙尔（Bouchard）对域名注册时间的分析发现，这些应用程序从2025年底开始出现，并在今年春季达到激增期。
“They contained this giant configuration list of other domains with different encryption keys,” says Maël Le Touz, a staff threat researcher at security firm Infoblox, who identified almost 500 linked domains. “They run the same code and they all reference one another.”Bouchard’s analysis of when domains were registered found that the apps started to appear toward the end of 2025, with a spike during the spring of this year.
研究人员表示，有一段时间，大约每周有30个“脱衣（nudify）”应用程序的网站被注册，9月份有27个在谷歌应用商店（Google Play Store）上线。布沙尔的研究显示，这些应用程序的总下载量已超过35万次，且许多应用程序被评为适合所有年龄段。
At one point, around 30 nudify apps-websites were being registered each week, the researcher says, with 27 live on Google’s Play Store in September. These apps had been downloaded more than 350,000 times collectively and many were rated suitable for all age groups, Bouchard’s research says.
一款名为DiffAI的最受欢迎的应用之一于2025年12月创建，在Play Store上的下载量已超过10万次。谷歌Play Store上的一条用户评论称：“这款应用包含用于创建儿童性虐待材料（CSAM）和其他类型色情内容的模板。它没有进行任何年龄验证。”在《连线》杂志就该网络联系谷歌之前不久，DiffAI被从Play Store下架。
One of the most popular apps, called DiffAI, was created in December 2025 and has been downloaded more than 100,000 times from the Play Store. A user review on Google’s Play Store stated: “This app contains templates for creating CSAM and other types of pornographic material. It performs no age verification.”DiffAI was removed from the Play Store shortly before WIRED contacted Google about the network.
《连线》杂志请求谷歌置评，谷歌未予回应，但在被联系之前已将大部分应用下架。（部分深度伪造网络的情况曾于9月份被丹麦记者报道。）同样，在《连线》杂志向苹果询问相关活动并分享相关域名后，苹果从其App Store中下架了19款应用，其中包括宠物照片应用Viefur。苹果公司发言人亚当·德马表示：“我们旨在将App Store打造成一个对用户而言安全且值得信赖的平台，脱衣应用和其他色情内容是遭到严格禁止的。”
Google did not respond to WIRED’s request for comment, though it had removed the majority of the apps ahead of being contacted. (Portions of the deepfake network were reported on by Danish journalists in September.) Similarly, Apple removed 19 apps from its App Store, including pet photo app Viefur, after WIRED asked the company about the activity and shared associated domains. “We designed the App Store to be a safe and trusted place for our users, and nudification apps and other pornographic content are strictly prohibited,” says Apple spokesperson Adam Dema.
德马表示：“我们在每款应用发布前都会进行审核，这些应用在审核时符合我们的规则。通过审核后，它们的开发者更改了应用获取内容的网站，将我们批准的内容替换为了色情内容，并通过托管在第三方平台上的色情广告进行推广。”该公司表示，在过去一年里，因使用这些“障眼法”策略，该公司已暂停了数万款应用，并于近期更新了其应用商店规则，以进一步限制“脱衣”工具。
“We review every app before it’s published, and these apps complied with our rules when we reviewed them,” Dema says. “After approval, their developers changed the website the app pulls its content from, replacing what we approved with pornographic content, and promoted it through pornographic ads hosted on a third-party platform.”The company says it has suspended tens of thousands of apps for using these “bait-and-switch” tactics over the last year and recently updated its app store rules to further restrict “nudify” tools.
中国起源这个“脱衣”网络的核心似乎是一批中国开发者，他们的身份似乎被故意隐藏了。勒图兹说：“它使用了专有的中国主机托管，代码是用中文编写的，并且有很多中文注释，”他指出，在Meta平台上发布的推广这些应用的广告中的显性视频，包含来自中文视频编辑软件的水印。
Chinese Origins Central to the “nudify” network appears to be a host of Chinese developers whose identities seem to have been intentionally hidden. “It’s using exclusive Chinese hosting, the code is written in Chinese and has a lot of comments in Chinese,” Le Touz says, noting explicit videos in ads posted to Meta’s platforms promoting the apps contained watermarks from Chinese-language video editing software.
该网络中的应用程序和域经常使用通用的隐私政策、来自Gmail或Outlook的免费电子邮箱地址，以及晦涩的开发者名称，以此作为其据称试图隐藏彼此联系的手段的一部分。发布在Meta平台上的这些应用程序广告还使用了明显是虚假的名称——例如Draftmondcreldbro Duhustepre和Swaldmungsha Glasirdcroldshold——以及没有粉丝的主页。自今年年初以来，布沙尔的研究在Meta的平台上发现了数万个与该网络相关的露骨深伪（deepfake）广告——这些广告在宣传文案中经常使用相似的语言。
The apps and domains across the network have often used generic privacy policies, free email addresses from Gmail or Outlook, and obscure developer names as part of their alleged efforts to hide their connections. Ads for the apps posted on Meta’s platforms have also used apparently false names—such as Draftmondcreldbro Duhustepre and Swaldmungsha Glasirdcroldshold—and pages with no followers. Since the start of this year, Bouchaud’s research has found tens of thousands of explicit deepfake ads linked to the network—often using similar language in their advertising copy—on Meta’s platforms.
“这些广告不仅违反了Meta的一项政策，而且违反了好几项政策，”科技透明项目（Tech Transparency Project）主任凯蒂·保罗说，她最早发现了展示未成年人露骨深伪形象的广告。“毫无疑问，你所看到的是什么，这款应用程序在宣传什么，”她说。保罗表示，科技公司需要回答有关这些应用程序产生的资金流向何处的问题，以及为什么那些制作“脱衣”应用程序和服务的幕后黑手似乎总能绕过它们的内容审核和安全系统。
“These ads violate not just one, but several of Meta’s policies,” says Katie Paul, the director of the Tech Transparency Project, who first uncovered the ads showing deepfake explicit depictions of minors. “There is no question about what you are seeing, what the app is advertising,” she says. Paul says tech companies need to answer questions about where money generated from the apps goes and how those behind the nudification apps and services constantly seem to bypass their content moderation and safety systems.
可灵科技有限公司（KeLing Technology Limited）似乎是该运作的重要组成部分。虽然该公司网站不过是一个空壳，但其名称被列为该网络中注册的第一个网站的联系方式。该网站的品牌名称也作为联系方式的一部分，出现在应用程序中使用的露骨深伪模板内。布沙尔还确认了一个与露骨深伪界面相关的管理页面，其中提到了“Keling”。使用该公司域名的电子邮箱地址出现在至少一个已从应用商店下架的应用程序中。
KeLing Technology Limited appears to be a significant part of the operation. While the company’s website is little more than a shell, its name was listed as the contact details of the first website registered in the network. This website’s brand name also appeared as part of the contact details within the explicit deepfake template that was used in the apps. Bouchaud also identified an administration page linked to the explicit deepfake interface that mentions “Keling.”And email addresses using the company’s domain appeared on at least one app that have been removed from app stores.
9月底，一个露骨深度伪造（deepfake）界面向用户发送通知，宣布可以使用一款新的AI模型——该模型名为Veyra，在应用中的宣传语是“更真实。更自然。更狂野。”一个名为Veyra AI的网站主页将其联系邮箱列为可灵科技（KeLing Technology）的地址。
Towards the end of September, a notification sent to users of the explicit deepfake interface announced that a new AI model could be used—the model was called Veyra, with a tagline in the apps of “More real. More natural. More wild.”The homepage of a website called Veyra AI listed its contact email as a KeLing Technology address.
当《连线》（WIRED）联系可灵的电子邮箱地址，以及应用隐私政策中列出的一些邮箱时，我们没有收到任何回复。然而，在《连线》联系之后，有人重新命名了一些关联的在线社交媒体频道，从Veyra AI网站上删除了可灵的电子邮箱地址，并从第一个注册网站上删除了可灵科技有限公司（KeLing Technology Limited）的地址。
When WIRED contacted KeLing email addresses, plus some of those listed in apps privacy policies, we received no response. However, after WIRED reached out, someone renamed some of the associated online social media channels, removed KeLing email addresses from the AI Veyra website, and removed the KeLing Technology Limited address from the first registered website.
Meta表示，它在2025年禁止可灵科技有限公司投放广告，因为该公司未能“遵守停止令”。（Meta以法律原因为由，拒绝向《连线》提供该停止令。）Meta发言人说：“我们对推广脱衣应用有严格规定，并积极努力将此类内容挡在我们的服务之外。”Meta表示，尽管可灵科技有限公司一直试图通过其他方式投放广告，但一旦发现相关广告，就会采取行动。
Meta says it banned KeLing Technology Limited from advertising in 2025 after it failed to “comply with a cease and desist letter.” (Meta declined to share the letter with WIRED citing legal reasons.) “We have strict rules against promoting nudify apps and work aggressively to keep this material off our services,” a Meta spokesperson says. Meta says that while KeLing Technology Limited has continued to try and advertise through other ways, it takes action against the ads when it becomes aware of them.
在《连线》与Meta分享这400多个域名后，该发言人表示，他们已分享了与这些域名关联的3000多条广告，其中三分之二已从其系统中移除。Meta后来告诉《连线》，它已对11600个广告账户、4700多个商业主页、5200名用户以及与这些域名关联的15000个页面采取了行动，并阻止了209个应用在其平台上投放广告。
After WIRED shared the 400-plus domains with Meta, the spokesperson said they had shared more than 3,000 associated ads linked to them, two-thirds of which it had already removed from its systems. Meta later told WIRED it has taken action against 11,600 ad accounts, more than 4,700 business pages, 5,200 users, and 15,000 pages linked to the domains, blocking 209 apps from advertising on its platforms.
该发言人说：“这些广告背后的犯罪分子采取越来越具有欺骗性的手段来逃避检测——隐藏在虚假姓名和身份背后，投放看起来无害的广告，有时还链接到谷歌和苹果的应用商店，广告的真实意图只有在点击后才会显露。”
“The criminals behind them take increasingly deceptive steps to evade detection—hiding behind fake names and identities, running ads that look benign, and sometimes linking to Google's and Apple's app stores, with the ads' true intent revealed only after a click,” the spokesperson says.
正当《连线》杂志完成这篇报道的采访时，类似的广告和应用程序仍在各大科技平台上不断发布。
As WIRED finished reporting this story, similar ads and apps continued to be published on the tech platforms.