{"id":3405,"date":"2026-10-06T20:20:50","date_gmt":"2026-10-06T20:20:50","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3405"},"modified":"2026-10-06T20:20:50","modified_gmt":"2026-10-06T20:20:50","slug":"fake-chatgpt-gemini-and-claude-ad-portals-capture-credentials-and-mfa-codes","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3405","title":{"rendered":"Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes"},"content":{"rendered":"
\n
<\/a><\/div>\n

Cybersecurity researchers have disclosed details of a \u00abhuman-operated phishing platform\u00bb that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.<\/p>\n

The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in mind: to capture credentials and multi-factor authentication (MFA) codes via spoofed login windows using the browser-in-the-browser (BitB) trick.<\/p>\n

\u00abEach product was built around the same action: Connect,\u00bb Island researchers Oleg Zaytsev and Ofek Ronen said<\/a> in a report shared with The Hacker News. \u00abClicking it opened a browser drawn inside the real browser. The fake address bar displayed trusted origins such as accounts.google.com or an Okta tenant, while the real browser remained on the phishing domain.\u00bb<\/p>\n

\u00abBehind the interface, the platform kept every password attempt, fingerprinted the device, and let an operator pick which MFA challenge the victim saw next.\u00bb<\/p>\n

One of the websites in question is \u00abmuseads.ai,\u00bb which emerged on September 16, 2026, a little over a week after Meta launched Muse<\/a>, its AI agent designed for personal workflows. Described as \u00abYour AI ads manager for paid media workflows,\u00bb the platform claimed to help customers reach buyers, connect their ad accounts, and run sponsored placements.<\/p>\n

Prominently placed in the spoofed web page is a Prompt Box with a \u00abConnect\u00bb button, clicking which triggers a BitB attack to capture a visitor’s account credentials for Google, Meta, TikTok, and Okta workflows. This is accomplished by drawing a fake window displaying a bogus account sign-in form with the address bar pointing to a legitimate domain (e.g., accounts.google[.]com).<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

In the background, the victim’s device is fingerprinted, and the information is transmitted to the attacker at the endpoint \u00ab\/api\/send\/ip\u00bb over Socket.IO, after which operator commands and victim data are exchanged based on the login workflow. Armed with the account credentials, the attacker attempts to sign in to the account in real-time. <\/p>\n

<\/p>\n

\u00abEvery brand gets its own pitch,\u00bb the researchers explained. \u00abChatGPT promises a Monday Google Ads brief. Gemini promises MCC (manager account) and linked-client support. Claude gets its own advertising portal, Perplexity offers campaign planning and spend audits, and Manus offers a private Meta integration.\u00bb<\/p>\n

\"\"<\/a><\/div>\n

Users are assessed<\/a> to be directed<\/a> to these landing pages via fake invitation emails that impersonate these trusted brands to lend the attacks a veneer of legitimacy.<\/p>\n

\u00abEach one in this campaign poses as a believable product, with its own brand, pitch, and sign-in flow,\u00bb the researchers pointed out. \u00abThey also move with the news.\u00bb<\/p>\n

Island said the AI ads pages are part of a broader phishing platform that supports a three-pronged operation, the two others being Google Ads-themed refund claims and payment confirmation, as well as recruitment-related sites for Tesla, Louis Vuitton, Nike, and Adecco.<\/p>\n

\"\"<\/a><\/div>\n

All the identified websites have been found to share the same technology stack comprising Next.js and Socket.IO, and communicate with the same endpoints. What’s more, the threat actors behind the operation have exposed source code for earlier versions of the platform through misconfigured public GitHub repositories.<\/p>\n

The AI ads-focused campaign is designed to target agency staff, media buyers, and manager-account administrators, likely with the end goal of monetizing the ads accounts to run their own ad campaigns or sell them for profit, especially when they have a clean spend history.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

According to a report published<\/a> by Mimecast in July 2026, malware families like VietCredCare, DuckTail, NodeStealer, and PXA Stealer have engendered ad account theft at scale, leading to a \u00abwidespread commodity crime in the advertising ecosystem\u00bb where bad actors drain business budgets and sell accounts with good reputation in underground markets.<\/p>\n

\u00abFor the victim, the card is the easy part: they can remove it within hours. Getting the account back is not,\u00bb Island said. \u00abAttackers typically add their own administrators and downgrade the legitimate owner, and recovery can take weeks or months while the account keeps serving ads. For a manager account, the damage reaches the agency\u2019s clients.\u00bb<\/p>\n

To mitigate the threat, organizations are recommended to enable phishing-resistant authentication, review advertising control changes, and scrutinize AI integrations before connecting accounts.<\/p>\n

The disclosure comes as Island revealed that threat actors are abusing Google-sponsored results to route unsuspecting users to custom GPTs or shared-AI chat content, which then redirect them to a fake Cloudflare verification page serving ClickFix-style lures to deliver NetSupport RAT.<\/p>\n

\u00abThe campaign did not require a vulnerability in ChatGPT or Google,\u00bb Island said<\/a>. \u00abIt abused trusted platforms, attacker-authored content, paid search, and social engineering to move people toward malware delivery.\u00bb<\/p>\n

\u00abAcross a three-month observation period ending in August 2026, the broader delivery cluster included about 850 paid-ad landings, 26 lookalike ChatGPT destinations, and 71 Google Ads campaign IDs.\u00bb<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Cybersecurity researchers have disclosed details of a \u00abhuman-operated phishing platform\u00bb that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and…<\/p>\n","protected":false},"author":1,"featured_media":3406,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2078,978,9,2052,446,150,282,1725,3063],"class_list":["post-3405","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-capture","tag-chatgpt","tag-claude","tag-codes","tag-credentials","tag-fake","tag-gemini","tag-mfa","tag-portals"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3405","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3405"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3405\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3406"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}