Fake AI sites target advertising accounts with operator-controlled phishing

Island researchers identified a phishing campaign that impersonates ChatGPT, Gemini, Claude and Perplexity to steal advertising account credentials and multi-factor authentication codes, BleepingComputer reports. It targets agency staff, media buyers and administrators whose accounts can reach multiple clients and spend advertising balances. A fake account connection opens a simulated Google login window inside the webpage. Human operators then control requests for passwords, authentication codes and approval prompts. The platform supports Google, Meta, TikTok and Okta sign-in workflows. Researchers found hundreds of victim submissions in its Telegram control channel, but that count does not establish how many accounts were successfully compromised.