Human-operated phishing platform steals credentials from AI ad portals
Researchers identified a human-operated phishing scheme impersonating AI chatbot advertising portals to steal user credentials and MFA codes.
Key points
- The phishing platform impersonates ad products for OpenAI ChatGPT, Google Gemini, Anthropic Claude, Perplexity, Meta Muse, and Manus.
- Attackers target users seeking campaign optimization and spend audits by capturing login credentials and multi-factor authentication codes.
- Cybersecurity researchers disclosed the details of this human-operated campaign, highlighting the risk of fake advertising interfaces for AI services.
Cybersecurity researchers have disclosed details of a human-operated phishing platform designed to steal credentials from users of major artificial intelligence chatbots. The scheme impersonates advertising portals for services including OpenAI ChatGPT, Google Gemini, Anthropic Claude, Perplexity, Meta Muse, and Manus, according to a report by The Hacker News.
The phishing infrastructure is built to mimic legitimate advertising products associated with these AI platforms. These fake portals claim to offer specific business services, such as campaign optimization, spend audits, and business-account connections. However, the primary objective of these interfaces is to capture user credentials and multi-factor authentication (MFA) codes. The researchers emphasized that the platform is human-operated, indicating active management by threat actors rather than purely automated botnets.
Context and Background
The emergence of this phishing campaign coincides with the growing adoption of AI chatbots for business and personal use. As these platforms expand their feature sets, including advertising and business integration tools, attackers are creating sophisticated replicas to exploit user trust. The fake portals are designed to look like official extensions or add-ons for the respective AI services, making them difficult for casual users to distinguish from legitimate offerings.
According to The Hacker News, the scope of the impersonation covers a wide range of prominent AI providers. By targeting the advertising and business-account aspects of these services, attackers are likely aiming to compromise accounts that may have access to financial data or sensitive business information. The use of MFA code theft suggests that the threat actors are aware of the security measures in place and are actively working to bypass them through real-time interception.
Who Is Affected
Users of OpenAI ChatGPT, Google Gemini, Anthropic Claude, Perplexity, Meta Muse, and Manus are potentially at risk if they interact with unauthorized advertising interfaces. The campaign specifically targets individuals or businesses looking to optimize ad campaigns or audit spending through these AI platforms. Any user who has entered credentials or MFA codes into a portal claiming to provide these services for the mentioned AI chatbots may have had their account compromised.
The threat is not limited to a single demographic but affects anyone using these AI services for business-related tasks. The human-operated nature of the platform means that attackers can potentially tailor their approach based on user interactions, increasing the likelihood of successful credential harvesting. Organizations that use these AI tools for marketing or business operations should be particularly vigilant, as compromised accounts could lead to significant financial or reputational damage.
What should you do?
Security teams and individual users should monitor for unauthorized access to their AI service accounts. If suspicious activity is detected, such as unexpected login attempts or changes to account settings, immediate action should be taken to secure the account. Users should also be cautious of any third-party services claiming to offer enhanced features for AI chatbots, especially those related to advertising or business integrations.
What to do and how to stay safe: OpenAI
- Verify the legitimacy of any third-party service claiming to integrate with AI chatbots like ChatGPT, Gemini, or Claude by checking official vendor documentation.
- Enable multi-factor authentication on all AI service accounts and monitor for unexpected MFA prompts that could indicate a phishing attempt.
- Regularly review account activity logs for unauthorized access or changes to account settings, particularly those related to advertising or business connections.
- Report any suspicious portals or phishing attempts to the respective AI service providers to help mitigate the spread of the campaign.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which AI chatbots are being targeted by this phishing campaign?
The campaign targets OpenAI ChatGPT, Google Gemini, Anthropic Claude, Perplexity, Meta Muse, and Manus, according to The Hacker News.
What is the primary goal of the phishing platform?
The platform is designed to capture user credentials and multi-factor authentication codes by impersonating advertising products for AI chatbots.
Is the phishing platform automated or human-operated?
Cybersecurity researchers disclosed that the phishing platform is human-operated, indicating active management by threat actors.
