Black Hat USA 2026 · Startup City
The new attack surface: the pixels and soundwaves you consume every day
Find us here
Backed by



Catch us on stage
Dissecting a Criminal Deepfake Tool

Jim Brennan

Tom Cross
Haotian AI is a Chinese language deepfake tool marketed to criminals and online scammers and sold via Telegram channels. It has earned a reputation online for being a uniquely powerful tool for performing faceswap deceptions. It is used for romance scams, law enforcement impersonations, and other social engineering attacks. Blockchain records indicate that its creators have earned over $4 million dollars selling the software to threat actors.
GetReal Security was able to obtain a copy of Haotian AI working in collaboration with journalists at 404 Media. In this session, we will review the features of the software and show how it enables online scams. We'll dive under the hood and describe some of the AI models that power the tool. Finally, we'll discuss different ways that threat actors are making use of tools like this, and what it takes to detect these kinds of deceptions in the wild.
Recognized by Gartner®
A Market Shaper in deepfake detection.
At Booth 5809
What you'll see when you stop by.
Catch a live deepfake
Watch a face swap, cloned voice, or AI avatar get flagged in real time on a live video call: the exact DPRK IT worker scenario from our stage talk.
GetReal ProtectForensics you can explain
See the artifacts that survive compression and prove manipulation, with explainable evidence that holds up when a detection has to stand as proof.
GetReal LabsStop blindly trusting who's on the other side of the screen.