TLDR
A phishing campaign is using fake versions of ChatGPT, Gemini, Claude, and Perplexity to trick users, especially ad account managers and agency staff, into handing over login credentials and multi factor authentication codes. Victims land...
How it works
A phishing campaign is using fake versions of ChatGPT, Gemini, Claude, and Perplexity to trick users, especially ad account managers and agency staff, into handing over login credentials and multi factor authentication codes. Victims land...
Red flags
- : A "Connect your ad account" prompt on a brand new AI tool page you reached via ads or DMs. A login pop up that is trapped inside the page and cannot be dragged past the browser edge. Requests for multiple passwords, SMS codes, or push approvals in a single session
What to do
- 1: Verify the exact domain of any AI tool before signing in
- 2bookmark official URLs. Use hardware security keys or passkeys instead of SMS or push based MFA. Re
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/fake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes/FAQ
Is Fake ChatGPT Gemini Claude sites steal ad accounts and MFA codes via browser in the browser phishing a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: A "Connect your ad account" prompt on a brand new AI tool page you reached via ads or DMs. A login pop up that is trapped inside the page and cannot be dragged past the browser edge. Requests for multiple passwords, SMS codes, or push approvals in a single session
What should I do first?
: Verify the exact domain of any AI tool before signing in; bookmark official URLs. Use hardware security keys or passkeys instead of SMS or push based MFA. Re
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.