[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ-dts5xqiB0wYXuZsl6kBMkoCmYPSGQOJZUZbL9hRwg":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":43,"controls":50},"f2a30b02-69db-4999-ac41-3711618dfa1a","fake-ai-chatbot-sites-harvest-mfa-codes-via-browser-in-browser-phishing","17e3f9aa-c311-4db2-81f6-6d225c9a50c4","Fake AI Chatbot Sites Harvest MFA Codes via Browser-in-Browser Phishing","Attackers are exploiting the widespread trust and popularity of AI tools like ChatGPT and Gemini to lure advertising account managers into convincing phishing sites. Using Browser-in-Browser (BitB) attacks, the campaign renders realistic fake browser windows that mimic legitimate login portals, tricking victims into surrendering not just passwords but live MFA codes to human operators in real time. This matters because even security-conscious users with MFA enabled can be compromised when the attack intercepts tokens dynamically, bypassing a control many organizations consider a strong safeguard. The targeting of high-value advertising accounts on Google, Meta, and TikTok amplifies the financial and reputational damage potential.","**Immediate actions:**\n- Train employees to verify URLs at the OS\u002Fbrowser address bar level and never enter credentials into popups or embedded browser windows that lack a real address bar.\n- Enforce phishing-resistant MFA (FIDO2\u002FWebAuthn hardware keys or passkeys) instead of SMS or TOTP codes, which can be intercepted in real time.\n\n**Long-term improvements:**\n- Deploy browser isolation or enterprise browser solutions that detect and block BitB rendering techniques before users interact with malicious pages.\n- Implement conditional access policies that restrict advertising platform logins to managed, compliant devices and known IP ranges.\n- Establish a verified allowlist of legitimate AI tool domains and block lookalike or newly registered domains at the DNS\u002Fproxy layer.\n\n**Detection measures:**\n- Monitor for anomalous login events on advertising platforms (unusual geolocations, rapid MFA prompts) and trigger automated account lockout workflows.\n- Ingest threat intelligence feeds covering newly registered phishing domains mimicking popular AI brands and block them proactively.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 9 – Email and Web Browser Protections","CIS Control 14 – Security Awareness and Skills Training","CIS Control 6 – Access Control Management","NIST SP 800-63B – Digital Identity Guidelines (Phishing-Resistant AAL3 Authenticators)","NIST AC-17 – Remote Access","NIST SI-3 – Malicious Code Protection","NIST AT-2 – Literacy Training and Awareness","MITRE ATT&CK T1534 – Internal Spearphishing","MITRE ATT&CK T1111 – MFA Interception","GDPR Article 32 – Security of Processing (where EU user data is at risk)",{},"published","2026-10-06T16:21:11.453669+00:00","2026-10-06T16:21:11.157+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes\u002F","fake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes-7a6163","Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes",[31,37],{"id":32,"name":33,"slug":34,"description":35,"color":36},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":38,"name":39,"slug":40,"description":41,"color":42},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[44],{"id":45,"date":46,"edition":47,"title":48,"audio_url":49},"8902c5a0-5cd3-40c3-9afa-cc2554fd2239","2026-10-07","morning","ThreatNoir Morning Brief — October 7","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-10-07\u002Fthreatnoir-morning-brief-2026-10-07.mp3",[51,55,59],{"slug":52,"name":53,"problem":54},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":56,"name":57,"problem":58},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":60,"name":61,"problem":62},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]