Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Summary
A new human-operated phishing platform has been discovered impersonating advertising portals for popular AI chatbots such as ChatGPT, Gemini, and Claude. These fake portals are designed to capture user credentials and multi-factor authentication (MFA) codes.
IFF Assessment
FOE
This phishing platform poses a direct threat to users by stealing credentials and MFA codes, making it bad news for defenders.
Defender Context
Defenders should be aware of this sophisticated phishing tactic that leverages the popularity of AI chatbots. Users need to be trained to scrutinize ad portals and be wary of unsolicited links or offers, especially those promising campaign optimization or account connections for AI services.