Fake ChatGPT and Gemini sites steal advertising accounts and MFA codes

A new phishing campaign targets advertising account managers with fake ChatGPT, Gemini, Claude, and Perplexity sites. The sites use browser-in-the-browser attacks to steal login credentials and multi-factor authentication (MFA) codes.