Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

What happened

A new campaign targeting ad account managers operates with fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor (a second proof of identity beyond the password) authentication (MFA) codes through browser-in-browser attacks. OpenAI is an artificial intelligence company based in San Francisco, founded in 2015, and its products and services include ChatGPT.

Key facts

• A new campaign targeting ad account managers — uses: fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks