Phishing operators use fake ChatGPT and Gemini ad sites to steal logins
The campaign targets advertising account managers and captures passwords alongside multi-factor authentication codes. BleepingComputer says it uses browser-in-browser attacks, while The Hacker News describes a human-operated platform whose fake chatbot advertising products promise campaign optimization, spending audits and business-account connections to draw users into the credential theft scheme.
- Other impersonated brands include Claude, Perplexity, Meta Muse and Manus.
Covered by 2 publishers within 3 hours of the first report.
Reporting2
BleepingComputer Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes · Bill Toulas
The Hacker News Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes · info@thehackernews.com (The Hacker News)