{"data":{"id":"b9450f0d-dc36-4879-8c1c-985216d32c3f","title":"Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes","summary":"Island researchers Oleg Zaytsev and Ofek Ronen disclosed a human-operated phishing platform that impersonates advertising products for ChatGPT, Gemini, Claude, Perplexity, Meta Muse and Manus. The fake login windows, built with the browser-in-the-browser (BitB) technique, capture credentials and MFA codes, and the site museads.ai appeared on September 16, 2026, shortly after Meta launched Muse. The campaign targets agency staff, media buyers and manager-account administrators, who may have their ad accounts monetized or sold.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.html","publishedAt":"2026-10-06T18:38:55.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["OpenAI","Google","Anthropic","Meta"],"affectedVendorsRaw":["ChatGPT","Google Gemini","Anthropic Claude","OpenAI ChatGPT","Perplexity","Meta Muse","Manus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-06T18:38:55.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}