Fake websites impersonating Gemini, ChatGPT and Perplexity are tricking advertisers: security researchers based in Iceland have uncovered this phishing campaign, which mimics advertising tools billed as powered by artificial intelligence. The goal: to steal login credentials and MFA codes in order to seize full control of advertising accounts, without exploiting a single technical flaw.
What is this phishing campaign disguised as AI tools?
The two-step barrier meant to stop an intruder collapses in a single move, because the victim crosses it themselves, in complete confidence.
Security researchers based in Iceland have uncovered a large-scale phishing campaign. It poses as a wide range of advertising products supposedly built on artificial intelligence, designed to deceive anyone who believes they are dealing with well-known, trusted tools.
To do this, the fake sites hijack names already well established in the artificial intelligence landscape, Gemini, ChatGPT and Claude chief among them. By borrowing the identity of these tools rather than inventing an unknown brand, the campaign banks on the instant, almost unthinking trust we place in a familiar name.
What are these fake sites trying to steal?
These fake sites are after one thing only: your login credentials and your MFA codes, the multi-factor authentication meant to protect your advertising account. By imitating Gemini, ChatGPT or Perplexity, their creators are trying to get you to enter this information yourself, with no technical flaw required at all.
Once both elements have been obtained, password and MFA code, access to the advertising account is complete. The two-step barrier meant to stop an intruder collapses in a single move, because the victim crosses it themselves, in complete confidence.
Why is this disguise as an AI advertising product so effective?
Security researchers from Iceland have uncovered a large-scale phishing campaign posing as a whole range of advertising tools built on artificial intelligence. It hijacks names as recognised as Gemini. This scale is not a minor detail: the better known and more legitimate the imitated brands appear to marketing professionals, the less vigilance is applied when entering login details.
Because the attackers’ stated aim is precise: to steal the login credentials and MFA codes (multi-factor authentication) that protect advertising accounts specifically. By targeting that particular lock rather than a simple password, the campaign strikes at the link companies usually consider the most secure, turning the trust placed in these AI tools against their own users.
Faced with this wave of fake Gemini, ChatGPT and Perplexity sites, the safest reflex remains suspicion towards any link received through an advert or a message, however convincing it looks: take the time to check the exact site address before entering your password or MFA code, and keep in mind that no serious artificial intelligence tool will ever ask you for this information urgently.
Also worth reading on La Sultane
After the World Cup: the FTF, a mirror of Tunisia’s crisis
Glam & Goodies Mini Market: the pop-up spotlighting Hammamet’s creators
Harry Styles crosses the Berlin Marathon finish line in under three hours
Chery Arrizo 8: the new premium saloon makes a splash in Tunisia
