Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in mind: to capture credentials and multi-factor authentication (MFA) codes via spoofed login windows using the browser-in-the-browser ( BitB ) trick. "Each product was built around the same action: Connect," Island researchers Oleg Zaytsev and Ofek Ronen said in a report shared with The Hacker News. "Clicking it opened a browser drawn inside the real browser.

First reported by The Hacker News. This page is a short excerpt; the full text is theirs.