[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUnK6e6kK1G71g30r-d3IO8wjasbQdiCk6QBcJR3puOQ":3},{"article":4,"iocs":55},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":32,"category":33,"article_tags":37},"2d40e55b-bf93-495d-8eea-cd14b77ad9ce","FBI, French authorities seize deepfake CSAM-for-sale websites","fbi-french-authorities-seize-deepfake-csam-for-sale-websites-29e6c7","Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, TikTok, Instagram and Facebook. The post FBI, French authorities seize deepfake CSAM-for-sale websites appeared first on CyberScoop.","The FBI and French authorities have shut down two websites, NudeLeaksTeens and NLTVIDS, used to distribute child sexual exploitation material, including AI-generated deepfakes. An unnamed 25-year-old French resident, suspected of being the primary administrator, has been arrested. The investigation, which began in 2024, uncovered material sourced from social media accounts and included content that violates the TAKE IT DOWN Act.","FBI and French authorities seize deepfake CSAM websites and arrest an administrator.","The FBI and French authorities have arrested an individual and seized a pair of websites that were used to disseminate child sexual exploitation material, including AI generated deepfake media, according to court documents. The websites, NudeLeaksTeens and NLTVIDS, were seized and shut down by the FBI this week. According to the Department of Justice, the cybercrime division of the French Paris Prosecutor’s Office has also arrested an unnamed 25-year-old French resident suspected of being the primary administrator for the sites. According to a seizure warrant filed Oct. 2 in the Eastern District of Virginia by Arlington County police detective and FBI cybercrime task force member John Bamford, law enforcement first became aware of the websites in 2024, which advertised hacked, leaked and stolen CSAM of young girls. FBI officials executed a search warrant on VeriSign, a Reston, Virginia-based U.S. domain registry that controls the seized website domains, taking servers, computers and other material. Together the sites offered “a wide range of explicit content including CSAM and content that violates the TAKE IT DOWN Act, which prohibits the non-consensual sharing of intimate images,” Bamford wrote. The TAKE IT DOWN Act, passed last year, makes it a crime to create or share nonconsensual “intimate” deepfake media of real people. The law also gives the Federal Trade Commission authority to enforce it and allows courts to order websites to remove such content. The sites posted explicit disclaimers disavowing child pornography while simultaneously advertising and selling CSAM. At least one had its own form of currency used to buy images and videos individually or bundles organized by victim. One collection, containing 189GB of material on 315 different girls, sold for $64.90. Some of the material came from victims’ social media accounts on Snapchat, TikTok, Instagram and Facebook, either recorded directly or stolen from their accounts. Several victims who appear on the site reported to law enforcement that their accounts were hacked. Some of the advertised collections were compiled by individuals now serving prison sentences for their crimes. One individual, Andrew Venegas, pled guilty in a Texas federal court to sexual exploitation of children and receipt of CSAM as was sentenced to 30 years in prison in April 2026. “In the investigation and prosecution of Venegas, law enforcement learned that Venegas obtained sexually explicit images and videos of his victims in various ways, including extortion and the unauthorized accessing of victim social media accounts,” wrote Bamford. A separate collection available for sale on one of the sites in 2022 and 2023 was named after an individual, Reuben Oswaldo Yeverino Rosales, who was convicted and sentenced to more than 34 years in prison in 2022 for sexual exploitation of children and cyber stalking. The websites put up disclaimers stating that they do not host or store any files or images on their servers, but rather link to “other non-affiliated sites” that do. Administrators would often encourage payments in cryptocurrency and urge individuals to reach out to them personally for some material, rather than posting them on the site. Share Facebook LinkedIn Twitter Copy Link Add to Preferred Sources","https:\u002F\u002Fcyberscoop.com\u002Ffbi-french-authorities-seize-deepfake-csam-websites\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2025\u002F11\u002FGettyImages-2038752650.jpg","2026-10-07T17:05:56+00:00","2026-10-07T18:00:26.92951+00:00",7,[18,21,23,26,28,30],{"name":19,"type":20},"Andrew Venegas","threat_actor",{"name":22,"type":20},"Reuben Oswaldo Yeverino Rosales",{"name":24,"type":25},"Snapchat","product",{"name":27,"type":25},"TikTok",{"name":29,"type":25},"Instagram",{"name":31,"type":25},"Facebook","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":32,"icon":34,"name":35,"slug":36},null,"Policy","policy",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":54},{"id":32,"icon":34,"name":35,"slug":36},[]]