A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks.
Researchers found that the phishing operation leveraged the recent launch of the Muse AI agent, which Meta describes as an assistant for various personal tasks.
The malicious pages target agency staff, media buyers, and administrators with accounts that extend to multiple downstream clients.
These accounts also typically allow attackers to spend available balances on fraudulent ad campaigns or resell them to other cybercriminals for significant amounts.
On the phishing sites, the fake AI products claim to help advertisers reach buyers, obtain ad briefs, and plan and audit advertising campaigns and spending.
To get the benefits, the user had to connect their account to the fake AI product. However, the "connect" button opens a fake Google window inside the page, complete with an address bar showing accounts.google.com.
Source: Island