A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. [...]
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
Summary + source link. No paywalls, no tracking.