Fake AI Ad Portals Target Users to Steal Credentials and MFA Codes
· 2h ago · Originally reported by The Hacker News
Cybercriminals are creating fraudulent advertising portals that mimic popular AI platforms like ChatGPT, Gemini, and Claude. These fake sites are designed to trick users into entering their login credentials and multi-factor authentication codes, enabling attackers to gain unauthorized access.
Why it matters
This highlights a growing threat where scammers exploit the popularity of AI tools and digital ad platforms to steal sensitive information, putting both users and advertisers at risk.
Explain it like I’m new here
It's like someone making a fake ticket booth at a concert to steal your money and password instead of giving you a real ticket.
Read the original at The Hacker News
Terms in this story
Made-for-advertising (MFA) sites
Made-for-advertising (MFA) sites are websites built mainly to generate ad revenue, typically with thin content, heavy ad density, fast refreshing ads and traffic bought through arbitrage.
MFA
MFA is the common abbreviation for made-for-advertising: websites or apps designed primarily to harvest ad revenue from purchased traffic, rather than to serve an audience with genuine content.
Go deeper
Related stories
Google Faces $3.2 Billion Damages Claim Over Ad Tech Practices
Google is facing a $3.2 billion damages claim related to its advertising technology business. The claim centers on allegations that Google's ad tech practices have caused financial harm to other parties.
Google Confronted With $3.2 Billion Ad-Tech Damages Claim, Potentially Tripled at Trial
Google is facing a $3.2 billion damages claim related to its ad tech business. If the case proceeds to trial, the damages could be tripled, significantly increasing the financial risk for the company.
Explainer: How Google's Performance Max campaigns work and where ad fraud risks may lurk
A new explainer breaks down Performance Max, Google's fully automated campaign type that spreads budgets across Search, Display, YouTube and other placements. It then asks whether the format's limited transparency and reporting controls…
Google Ads to Auto-Apply Merchant Coupons to Search, Performance Max Campaigns
Starting October 12, Google Ads will automatically apply website coupon offers to eligible Search and Performance Max campaigns that use location assets. Sourced offers are rechecked within 24 hours, though the review process for what goes…
US Court Bars Google Ad Exchange From 'Last Look' Bidding Advantage
A US court order has prohibited Google's ad exchange from using 'last look,' a practice that allowed the platform to view competitors' highest bids before placing its own in ad auctions. The ruling removes what critics called an unfair…
Google Ad Manager's Unified Pricing Rules: A Look Back at the Retired Floor-Price System
Google Ad Manager's unified pricing rules (UPR), a single floor-price mechanism for non-guaranteed demand, launched in 2019 and was retired in December 2025. The system allowed publishers to set one minimum price across all open auction…