As cited
Copy frozen at (site build).
threat intel
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Attackers deployed fake versions of ChatGPT, Gemini, Claude, and Perplexity sites to harvest login credentials and multifactor authentication (MFA) codes from advertising account managers using browser-in-browser attack techniques. The campaign exploits the popularity of these artificial intelligence (AI) services to deceive users into entering sensitive authentication data on fraudulent pages.
Why it matters: Ad account managers and teams using these AI services are at immediate risk of account compromise and unauthorized access to advertising budgets; validate any login prompts and enable strong MFA where available.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Attackers deployed fake versions of ChatGPT, Gemini, Claude, and Perplexity sites to harvest login credentials and multifactor authentication (MFA) codes from advertising account managers using browser-in-browser attack techniques. The campaign exploits the popularity of these artificial intelligence (AI) services to deceive users into entering sensitive authentication data on fraudulent pages.
Why it matters: Ad account managers and teams using these AI services are at immediate risk of account compromise and unauthorized access to advertising budgets; validate any login prompts and enable strong MFA where available.
- Source published
- First seen by Cybersecurity Tracker