Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
-
A newly observed campaign is targeting advertising account managers by impersonating popular AI platforms. The operation uses fake ChatGPT, Gemini, Claude, and Perplexity sites to harvest login credentials and multi-factor authentication (MFA) codes, relying on browser-in-browser attack techniques to make the fraudulent pages appear legitimate.
According to the reporting, victims are lured to the spoofed sites and prompted to sign in, at which point the stolen credentials and MFA codes are captured. The attackers appear to be focused specifically on advertising accounts, which can be abused for malicious ad campaigns or resold.
Key points:
- The campaign impersonates ChatGPT, Gemini, Claude, and Perplexity.
- It targets advertising account managers.
- Browser-in-browser attacks are used to make fake login windows look genuine.
- Both login credentials and MFA codes are stolen.
There is no specific CVE or advisory identifier cited in the source for this campaign, so none is included here. Users managing ad accounts should treat unsolicited links to AI login pages with caution and verify they are on the legitimate domain before entering credentials or MFA codes.
Source: Publication Name
Has anyone in the community seen similar browser-in-browser lures targeting ad account teams, and what steps are you taking to verify login pages?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login