A recent phishing campaign targets ad account managers using counterfeit websites mimicking popular AI services like ChatGPT, Gemini, Claude, and Perplexity. The attack employs a browser-in-browser technique to intercept legitimate login credentials and multi-factor authentication codes, resulting in complete account takeover.

phishingmfa bypasscredentialsbrowser-in-browser
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →