{
  "id": 12652711,
  "title": "ChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes",
  "url": "https://urgent.news/2026/10/07/chatgpt-gemini-and-claude-imitated-in-fake-ads-that-steal-credentials",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-07T15:08:01.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/chatgpt-gemini-and-claude-imitated-in-fake-ads-that-steal-credentials-and-mfa-codes"
  },
  "original_language": "en",
  "account": "Fake AI marketing tools are being used to imitate popular AI platforms like ChatGPT, Google Gemini, Claude, and others in order to steal business accounts. Attackers employ sophisticated phishing techniques and live operators to capture credentials, such as login information and MFA codes. Once stolen, these credentials provide access to valuable resources like payment methods, budgets, and linked client accounts. Cybercriminals are now selling fake AI-powered products to advertisers and marketing managers, preying on their desire for cutting-edge technology. The perpetrators have left the source code for their earlier versions open on a misconfigured public GitHub repository, allowing researchers to gain insights into the operation and its success. The advanced phishing platform targets various brands, tailoring the pitch accordingly. Each site prompts the victim to connect their Google account, launching a typical browser-in-the-browser attack that mimics legitimate domains. The fake browser adapts to the visitor's device, making it difficult for the victim to spot the deception. A \"human operator\" on the other end then guides the victim through the process, adjusting the experience based on their inputs and chosen security measures. The platform supports multiple workflows, including Google, Meta, TikTok, and Okta. The ultimate goal is financial gain, as the stolen accounts are connected to credit cards and approved budgets. Researchers have published a report detailing the campaign, urging organizations to treat fictional AI integrations as account-access requests and implement phishing-resistant authentication methods.",
  "summary": "Cybercriminals are on the hunt for advertiser accounts preloaded with credit cards and cash.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 4,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "I put Claude Opus 5.5 against Gemini 3.1 Pro on 3 everyday prompts, and I'm ready to pay for one less subscription now",
        "url": "https://urgent.news/2026/10/07/i-put-claude-opus-5-5-against-gemini-3-1-pro-on-3-everyday-prompts",
        "published": "2026-10-07T11:30:17.000Z"
      },
      {
        "outlet": "The National Business",
        "title": "Why staff using ChatGPT, Claude and Gemini for work could create problems for employers",
        "url": "https://urgent.news/2026/10/07/why-staff-using-chatgpt-claude-and-gemini-for-work-could-create",
        "published": "2026-10-07T12:47:27.000Z"
      },
      {
        "outlet": "Seeking Alpha News",
        "title": "ChatGPT, Gemini see daily active user increases as Meta's Muse nears 2M: BofA",
        "url": "https://urgent.news/2026/10/07/chatgpt-gemini-see-daily-active-user-increases-as-metas-muse-nears-2m",
        "published": "2026-10-07T16:25:26.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}