Coordinated Phishing Campaign Exploits AI Brand Names to Compromise Advertising Accounts and Steal MFA Codes

Attackers are operating a sophisticated phishing platform that impersonates multiple AI services—ChatGPT, Gemini, Claude, Perplexity, and Muse—to target advertising professionals and steal Facebook, Google, and Meta credentials along with multi-factor authentication codes. Security researchers have documented hundreds of victim submissions to the operation, which began escalating in early 2026.