AI‑Generated Fake Antivirus Renewal Scam Uncovered
Malwarebytes has identified a new fake antivirus renewal page that uses AI‑generated content to mimic an Avast subscription notice, targeting users in Belgium. The fraudulent site claims the victim’s Avast Premium Security has been renewed for €129.99, covering five devices, and displays a green checkmark beside an “Active” badge to appear legitimate.
The page was discovered during routine threat‑intelligence work and stood out because its design and wording were more polished than typical phishing sites. Researchers traced the domain to a hosting provider that offers automated site‑building tools, suggesting the scammers relied on AI to generate the copy and layout with minimal technical skill. The scam lures users into entering payment details or personal information, hoping to collect credit‑card numbers and other data.
Victims are primarily Avast users in Belgium, but the technique can be adapted to other regions and software brands. The scam works by sending phishing emails or pop‑up ads that direct recipients to the fake renewal page. Once on the site, users see a convincing message that their subscription has been renewed automatically, prompting them to confirm payment. Because the page looks authentic, many users may comply without questioning the request.
To avoid falling for this type of fraud, verify any renewal notice by logging directly into the official Avast account portal rather than clicking links in emails or ads. Check the URL carefully; legitimate Avast pages use the avast.com domain and secure HTTPS connections. If you receive an unexpected renewal request, contact Avast support through official channels before providing any payment information. Use free tools such as the URL scanner on ComputerScams.com to analyze suspicious links, and keep your browser and security software up to date.
Protecting yourself also means monitoring your financial statements for unauthorized charges and reporting any fraudulent activity to your bank. Enable two‑factor authentication on important accounts to add an extra layer of security. Regularly reviewing password security and using unique passwords for each service can limit damage if credentials are compromised.
The presence of AI‑generated text on the page underscores how quickly scammers can produce convincing fake websites with limited expertise. As these tools become more accessible, users must stay vigilant and apply basic cyber security checks to every online request.
A practical safety tip: always type the website address you intend to visit into the browser yourself, rather than following links in unsolicited messages.
Source: Read the original report