Cybercriminals are using artificial intelligence to create fake websites for non-existent water parks and amusement parks across Russia, cybersecurity researchers at Kaspersky GReAT warned on August 7, 2026.
Analysts at the threat research team identified approximately 300 fraudulent resources designed to trick city residents into surrendering account details and payment information.
The scheme lures visitors with promises of free tickets, drinks, and other promotions, but the ultimate goal is to lead victims into private messaging app channels where social engineering techniques are used to extract sensitive data.
How scammers use artificial intelligence
Kaspersky GReAT noted that the fraudulent portals are customized for different Russian cities using a unified template. The single-page landing sites feature photos of water parks or rides, event descriptions, a countdown timer, and a notification claiming the first few hundred visitors can claim free tickets or bonuses.
Artificial intelligence played a key role in building the fake platforms. Creating web pages for fictional venues requires less effort than building accurate phishing copies of actual locations, allowing scammers to scale the campaign across hundreds of clone portals.
Kaspersky Lab, headquartered in Moscow, monitors international cyber threats through its Global Research and Analysis Team, known as GReAT.
Kaspersky advice on verifying online offers
Georgy Kucherin, a senior expert at Kaspersky GReAT, advised users who see advertisements for new entertainment facilities to verify whether the locations actually exist.
Kucherin recommended using official city administration websites, developer portals, or trusted media outlets to confirm details before trusting a new venue.
He also warned against following suspicious links, especially those leading to private channels on messaging apps or featuring limited-time promotions and free ticket offers.
Broader online threat activity
The warning follows an earlier investigation revealing a network of more than 120 websites spreading fake information aimed at Russian web users. Security analysts suspect hackers associated with the group Rare Werewolf may be operating that network.
