Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Active phishing campaign deploying sophisticated fake artificial intelligence portals. The operation targets marketing agencies, media buyers, and digital advertising managers by offering bogus integrations for ChatGPT, Gemini, Claude, Perplexity, and Manus. Designed to hijack corporate advertising budgets and client accounts, each brand lure promises specific marketing capabilities, such as automated ad briefs, manager account linking, spending audits, or private social media management tools.
Browser-in-the-Browser Mechanics and Live Operator Hijacking
The campaign relies on Browser-in-the-Browser phishing frameworks, which render a simulated popup window directly inside the main web page. This fake window mirrors authentic operating system styles, mobile toolbars, dark mode settings, and legitimate authentication origins like Google, Meta, TikTok, or Okta. When a user attempts to log in, the platform captures submitted credentials and uses real-time Socket.IO communication channels to forward the data directly to a human operator. The human attacker manually attempts login on the real service, triggering dynamic prompts on the victim screen to request multi-factor authentication codes, authenticator app numbers, push notifications, or hardware approval checks in real time.
Operational Infrastructure and Defensive Strategies
The underlying attack platform features a modular technology stack utilizing Next.js, Vercel frontends, and Render backends linked directly to attacker Telegram channels. Misconfigured public GitHub repositories exposed source code tracing campaign development back to early 2026, alongside related phishing lures focused on fake job opportunities and refund portals. To defend against this threat, organizations must adopt origin-bound FIDO2 passkeys, enforce hardware security keys, and train personnel to detect static, non-resizable iframe popups that cannot be dragged beyond browser window borders.
Comments