AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

LowNews

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Source: The Hacker News(opens in a new tab)
Published: October 6, 2026
Record updated: October 9, 2026

Summary

Island researchers Oleg Zaytsev and Ofek Ronen disclosed a human-operated phishing platform that impersonates advertising products for ChatGPT, Gemini, Claude, Perplexity, Meta Muse and Manus. The fake login windows, built with the browser-in-the-browser (BitB) technique, capture credentials and MFA codes, and the site museads.ai appeared on September 16, 2026, shortly after Meta launched Muse. The campaign targets agency staff, media buyers and manager-account administrators, who may have their ad accounts monetized or sold.

Details

Scores and exploitation

Disclosure date: October 6, 2026

Affected

Vendors: OpenAI,
Google,
Anthropic,
Meta

Classification

Attack type: Other
Attack sophistication: Moderate
Impact: Confidentiality
Labels: security,
industry

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.html

First tracked: October 6, 2026 at 08:01 PM ET, from The Hacker News

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 80% (self-assessed)

Corrections

2026-10-10: Severity changed from high to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Summary

Related items

Summary

Related items