Phishing sites impersonate AI chatbot products to steal advertising-account credentials and MFA codes
Researchers reported a campaign using fake sites that mimic AI chatbot advertising products to target advertising-account managers. The sites are described as stealing login credentials and multi-factor authentication codes, including through browser-in-browser attacks.