Brievox

AI

Phishing sites impersonate AI chatbot advertising portals to steal credentials and MFA codes

Reports describe fake advertising portals impersonating AI chatbot services to target advertising accounts and capture credentials and multi-factor authentication codes. One report specifically says the campaign uses browser-in-browser attacks.

2 sources Published Updated

Image: The Hacker News

Why it matters

The described campaign targets advertising accounts and seeks credentials and multi-factor authentication codes through impersonation, presenting a direct account-security risk.

What we know

Confirmed by several sources

  • Reports describe fake sites impersonating AI chatbot services in an effort to steal login credentials and multi-factor authentication codes. — The Hacker News, BleepingComputer

Reported by one source

  • The platform is described as human-operated and as offering campaign optimization, spend audits and business-account connections. — The Hacker News
  • The campaign is described as using browser-in-browser attacks against ad account managers. — BleepingComputer
  • The impersonated services listed include Meta Muse and Manus. — The Hacker News

Coverage 2 publishers

  1. BleepingComputer

    Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

  2. The Hacker News

    Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Articles stay on their publishers’ sites; each link opens the original.