Fake ChatGPT and Gemini ad portals steal credentials and MFA codes

· Cybersecurity

Researchers have disclosed a human-operated phishing platform that impersonates advertising products for AI chatbots including OpenAI's ChatGPT, Google's Gemini, Anthropic's Claude and Perplexity. The fake portals target advertising account managers and steal login credentials and multi-factor authentication codes using browser-in-browser attacks, in which a fake login window is rendered inside the page to look like a legitimate browser prompt. The operation is hands-on, with attackers guiding victims through the process, which makes it harder for automated defenses to catch. Because ad accounts carry budgets and billing access, a compromise can lead to fraudulent spending and further intrusion into connected business systems.

Why it matters：Phishing aimed at AI-branded advertising tools combines two valuable targets, cloud ad budgets and AI platform access, and the human-operated, browser-in-browser approach shows attackers adapting to MFA adoption, a pattern defenders should expect to spread.

Key points

  • Fake portals impersonate ad products for ChatGPT, Gemini, Claude and Perplexity.
  • Attackers use browser-in-browser techniques to capture credentials and MFA codes.
  • The platform is human-operated, with attackers guiding victims in real time.

Sources (original reporting)

More stories from this day