# Fake AI sites target advertising accounts with operator-controlled phishing

_Published Tuesday, October 6, 2026 at 12:24 PM EDT · Security · Latest · Tier 2 — Notable_

![Fake AI sites target advertising accounts with operator-controlled phishing — Primary](https://www.bleepstatic.com/content/hl-images/2024/05/13/Phishing.jpg)

Island researchers identified a phishing campaign that impersonates ChatGPT, Gemini, Claude and Perplexity to steal advertising account credentials and multi-factor authentication codes, BleepingComputer reports. It targets agency staff, media buyers and administrators whose accounts can reach multiple clients and spend advertising balances.

A fake account connection opens a simulated Google login window inside the webpage. Human operators then control requests for passwords, authentication codes and approval prompts. The platform supports Google, Meta, TikTok and Okta sign-in workflows.

Researchers found hundreds of victim submissions in its Telegram control channel, but that count does not establish how many accounts were successfully compromised.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/fake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes/)

---
Canonical: https://techandbusiness.org/newswire/__KX094S9K0k8907FvXd_Q
Published: 2026-10-06T16:24:31.250Z
Story chronology: 2026-10-06T15:16:44.000Z
Retrieved: 2026-10-06T18:14:56.840Z
Publisher: Tech & Business (techandbusiness.org)