Researchers have described a human-operated phishing platform that impersonates advertising products associated with AI services including ChatGPT, Gemini, Claude, Perplexity, and Meta. The operation is designed to capture credentials and multi-factor authentication codes.
The campaign demonstrates how familiar AI brands can be used to make targeted phishing more convincing. Defenders should remind users to enter credentials only through known URLs, use phishing-resistant MFA where possible, and require out-of-band verification for unexpected account or advertising-platform requests.
Detection teams should review identity-provider logs for new devices, unusual geographies, repeated MFA prompts, and successful sign-ins following password resets. Brand-monitoring and takedown processes can help limit exposure, but credential protection and rapid session revocation remain critical.
Source: The Hacker News