Fake AI Sites Target Advertising Accounts and Steal MFA Codes
· 4h ago · Originally reported by BleepingComputer
Cybercriminals are using fraudulent websites that mimic popular AI platforms like ChatGPT and Gemini to steal access to advertising accounts and multi-factor authentication (MFA) codes. These phishing schemes put digital ad accounts at risk of unauthorized access and potential financial loss.
Why it matters
This matters because ad account takeovers can lead to stolen budgets, fraudulent ad campaigns, and compromised business data, impacting both advertisers and platforms.
Explain it like I’m new here
It's like someone pretending to be your favorite game website to trick you into giving them your password and secret code.
Read the original at BleepingComputer
Terms in this story
Made-for-advertising (MFA) sites
Made-for-advertising (MFA) sites are websites built mainly to generate ad revenue, typically with thin content, heavy ad density, fast refreshing ads and traffic bought through arbitrage.
MFA
MFA is the common abbreviation for made-for-advertising: websites or apps designed primarily to harvest ad revenue from purchased traffic, rather than to serve an audience with genuine content.
Go deeper
Related stories
Study Finds 9.3% Invalid Clicks for Education Brands Bidding on Competitor Keywords
A recent analysis by Lunio reveals that education brands bidding on their rivals' names in search ads experience a 9.3% rate of invalid clicks. This highlights a significant risk of wasted ad spend due to non-genuine or fraudulent activity…
Pixalate Identifies Apps and Sites Impacted by Ad Fraud Clawbacks Over Past Year
Pixalate has highlighted a list of apps and websites that have been subject to ad fraud clawbacks within the last 12 months. This indicates ongoing efforts to address invalid traffic and recover funds lost to fraudulent activity in the…
Pixalate Launches Ad Fraud Clawback Warning Labels for 17.5M Programmatic Publishers
Pixalate has introduced a new warning label system that flags programmatic publishers—across CTV apps, mobile apps, and websites—when their inventory exceeds certain ad fraud thresholds. The system analyzes transactions from 745 global ad…
Fake AI Ad Portals Target Users to Steal Credentials and MFA Codes
Cybercriminals are creating fraudulent advertising portals that mimic popular AI platforms like ChatGPT, Gemini, and Claude. These fake sites are designed to trick users into entering their login credentials and multi-factor authentication…
Explainer: How Google's Performance Max campaigns work and where ad fraud risks may lurk
A new explainer breaks down Performance Max, Google's fully automated campaign type that spreads budgets across Search, Display, YouTube and other placements. It then asks whether the format's limited transparency and reporting controls…
Example.com Redesign Introduces Rotating Languages and Page Split to Reduce Bot Traffic
Example.com has updated its website by adding rotating language options and splitting its main page. These changes are aimed at reducing bot traffic and improving user experience.