Severity: HighIncidentPrompt injection
Phishing Platform Impersonates AI Chatbot Ad Services to Harvest Credentials and Multi-Factor Codes
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
Researchers identified a human-operated phishing campaign that creates fake advertising portals mimicking ChatGPT, Gemini, Claude, and other AI platforms to deceive users into surrendering login credentials and MFA codes. The attackers masquerade as legitimate ad management tools offering campaign optimization and spend audits, expanding their reach across multiple high-profile AI services.
What to do
Enforce mandatory security awareness training on phishing tactics and verify all ad platform access through official branded portals only.
Mapped framework pillars
Sources
#phishing#credential theft#MFA bypass#AI services#social engineering#impersonation