aiqbench takeAI Safety

This campaign exploits the growing trust in AI brand identities by deploying sophisticated phishing lures that mimic ChatGPT, Claude, and Gemini to harvest credentials and MFA codes. The attackers leverage familiar technology branding and live human operators to bypass conventional malware defenses, targeting advertising professionals with high-value account compromises. This highlights a critical shift where social engineering tactics now directly weaponize the public's perception of advanced AI models for credential theft.

Source coveringCybersecurity News

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes

Cybersecurity NewsOctober 7, 20265 min read

Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of delivering a conventional malware download, the campaign uses convincing websites and live human operators to guide victims through fraudulent sign-in screens. Invitation emails lead advertisers to pages promising campaign planning, spending audits and account connections. […] The post Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes appeared first on Cyber Security News.

Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of delivering a conventional malware download, the campaign uses convincing websites and live human operators to guide victims through fraudulent sign-in screens. Invitation emails lead advertisers to pages promising campaign planning, spending audits and account connections. The approach echoes earlier attacks involving fake AI advertising apps, which used familiar technology brands to make credential requests appear legitimate. Island.io researchers Oleg Zaytsev and Ofek Ronen identified the…

Excerpt shown under the publisher's RSS terms · 85 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article