Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Phishing campaign uses fake AI sites to steal ad account credentials and MFA codes via browser-in-browser attacks.
Attackers are running a sophisticated phishing campaign targeting advertising account managers with fake ChatGPT, Gemini, Claude, and Perplexity sites. The malicious pages leverage browser-in-browser (BitB) attacks to steal login credentials and MFA codes, with human operators controlling the flow to request passwords, SMS codes, and authenticator tokens. The campaign is part of a broader operation traced back to March 2026, using a Next.js/Socket.IO infrastructure to target Google, Meta, TikTok, and Okta sign-in workflows.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ChatGPT?
Get an email when a new story names ChatGPT, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers are exploiting the widespread trust and popularity of AI tools like ChatGPT and Gemini to lure advertising account managers into convincing phishing sites. Using Browser-in-Browser (BitB) attacks, the campaign renders realistic fake browser windows that mimic legitimate login portals, tricking victims into surrendering not just passwords but live MFA codes to human operators in real time. This matters because even security-conscious users with MFA enabled can be compromised when the attack intercepts tokens dynamically, bypassing a control many organizations consider a strong safeguard. The targeting of high-value advertising accounts on Google, Meta, and TikTok amplifies the financial and reputational damage potential.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Browser-in-Browser (BitB) Phishing Kit