Phishing campaign uses fake AI ad tools to steal credentials

Researchers report a phishing operation targeting digital advertising professionals through counterfeit AI tools like ChatGPT, Gemini, Claude, and Muse. The attackers use fake login windows within a browser to trick victims into providing credentials and multi-factor authentication codes. These attacks let criminals gain access to ad accounts, enabling fraudulent ad spending or further resale. The platforms claim to help with ad campaigns and optimization, luring victims to connect their business accounts.

• Targets ad agencies and media buyers with fake AI ad tools
• Uses in-browser phishing windows to steal credentials
• Attackers obtain MFA codes to bypass security layers
• Stolen accounts can be used for fraudulent ad campaigns
• Part of a larger, ongoing phishing operation