Source: thehackernews.com
Cybersecurity researchers have uncovered a human-operated phishing platform that impersonates advertising products for major AI chatbots including Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The fake portals pose as legitimate advertising tools offering services such as campaign optimization, spend audits, and business-account connections. The primary objective of these portals is to capture user credentials and multi-factor authentication (MFA) codes from victims. The platform targets businesses and individuals who manage advertising campaigns on AI platforms. The operation is human-operated, suggesting active involvement during attacks rather than fully automated phishing. This campaign exploits the growing popularity and trust in AI-based tools to lure victims. The threat represents a significant risk to organizations using AI advertising services, as credential and MFA theft can lead to full account takeover.
