Phishing Platform Uses Fake AI Ad Portals to Steal Credentials and MFA Codes
Summary
Researchers say a human-operated phishing platform impersonates AI advertising tools, using fake in-browser login windows to steal credentials and MFA codes from targeted business and advertising accounts.
Key points
- Fake portals impersonate advertising products associated with ChatGPT, Gemini, Claude, Perplexity, Meta Muse, and Manus.
- The sites use browser-in-the-browser windows that display trusted login domains while keeping victims on phishing websites.
- Operators can steer authentication in real time, prompt for passwords and MFA challenges, and reject submitted codes.
- The platform fingerprints victims’ devices and exchanges data and commands through Socket.IO endpoints.
- Fake invitation emails reportedly direct agency staff, media buyers, and advertising-account administrators to the portals.
- Researchers say the broader platform also supports Google Ads refund and payment lures, plus recruitment-themed sites.
- Recommended defenses include phishing-resistant authentication, reviewing advertising-account changes, and scrutinizing AI integrations before connecting accounts.
Article Details
- Attack Vectors
- Fake invitation emails impersonate trusted brands and direct recipients to phishing landing pages.
- Browser-in-the-browser windows imitate Google or Okta sign-in pages to capture account credentials and MFA codes.
- A human operator uses real-time commands to control authentication prompts, including password, SMS, authenticator, and push challenges.
- A separate campaign abuses Google-sponsored results and attacker-authored AI content to redirect users to fake Cloudflare verification pages serving ClickFix-style lures for NetSupport RAT.
- Defensive Notes
- Enable phishing-resistant authentication.
- Review changes to advertising controls and account administrators.
- Scrutinize AI integrations before connecting advertising accounts.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | museads[.]ai | Phishing website impersonating an AI advertising product to capture account credentials and MFA codes. |
MITRE ATT&CK
People
Malware
DuckTailAccording to a report published by Mimecast in July 2026, malware families like VietCredCare, DuckTail, NodeStealer, and PXA Stealer have engendered ad account theft at scale, leading to a "widespread commodity crime inNetSupport RATthen redirect them to a fake Cloudflare verification page serving ClickFix-style lures to deliver NetSupport RAT.NodeStealerAccording to a report published by Mimecast in July 2026, malware families like VietCredCare, DuckTail, NodeStealer, and PXA Stealer have engendered ad account theft at scale, leading to a "widespread commodity crime inPXA Stealerpublished by Mimecast in July 2026, malware families like VietCredCare, DuckTail, NodeStealer, and PXA Stealer have engendered ad account theft at scale, leading to a "widespread commodity crime in the advertisingVietCredCareAccording to a report published by Mimecast in July 2026, malware families like VietCredCare, DuckTail, NodeStealer, and PXA Stealer have engendered ad account theft at scale, leading to a "widespread commodity crime in
Vendors
Anthropicthat impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Googlephishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Metaartificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Oktainside the real browser. The fake address bar displayed trusted origins such as accounts.google.com or an Okta tenant, while the real browser remained on the phishing domain."OpenAIadvertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Perplexityfor artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.
Products
ChatGPTadvertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Claudethat impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Google Ads"Every brand gets its own pitch," the researchers explained. "ChatGPT promises a Monday Google Ads brief. Gemini promises MCC (manager account) and linked-client support. Claude gets its own advertising portal,Google Geminiplatform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Manus(AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Meta Museartificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.Oktainside the real browser. The fake address bar displayed trusted origins such as accounts.google.com or an Okta tenant, while the real browser remained on the phishing domain."Perplexityfor artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.