Cybersecurity researchers have uncovered a human-operated phishing platform designed to impersonate advertising portals for popular artificial intelligence (AI) chatbots. The platform specifically targets users by mimicking ad products for services such as Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. Its primary objective is to capture user credentials and multi-factor authentication (MFA) codes.
The phishing platform functions by presenting itself as legitimate advertising management tools for these AI chatbot services. These fake portals claim to offer features like campaign optimization, spend audits, and business-account connections, which are common functionalities in legitimate advertising platforms. However, these offerings are merely a lure to entice users to interact with the malicious site.
The technical mechanism behind this attack involves social engineering combined with credential harvesting. Users are likely directed to these fake portals through various means, such as malicious advertisements, compromised websites, or direct phishing emails. Once on the site, they are prompted to log in using their credentials for the impersonated AI service or an associated account, such as a Google or Microsoft account.
Upon entering their username and password, the platform is designed to immediately capture this information. Furthermore, because it is described as a "human-operated" platform, it suggests that attackers are actively monitoring user interactions. This allows them to prompt for and quickly relay any MFA codes entered by the victim, effectively bypassing this critical security layer in real-time. This real-time interaction is crucial for defeating time-sensitive MFA mechanisms.
Products in the AI chatbot category, especially those with business-oriented advertising interfaces, are frequently targeted due to the perceived value of access to such accounts. Compromised advertising accounts can be used for further malicious ad campaigns, financial fraud, or to gain access to sensitive business data. The scope of such an attack is broad, potentially affecting any user who interacts with advertising platforms for these AI services.
Typical mitigation guidance for this class of issue includes rigorous user education about phishing tactics, especially the importance of verifying URLs before entering credentials. Users should be advised to always navigate directly to known legitimate websites rather than clicking on links from unverified sources. Implementing strong, phishing-resistant MFA methods, such as hardware security keys, can also significantly reduce the risk, as these are harder for attackers to bypass even with real-time credential capture.
This incident underscores the ongoing threat posed by sophisticated phishing operations, particularly those that leverage current technological trends like AI. The use of human operators indicates a higher level of dedication and adaptability from attackers, making these campaigns more challenging to detect and defend against compared to automated phishing attempts. It highlights the need for continuous vigilance and robust security practices in an evolving threat landscape.
