Fake ChatGPT and Gemini sites hijack ad accounts with live browser-in-the-browser phishing
Island researchers found fake AI product sites that lure advertising staff into a fake Google sign-in window, where a human operator harvests passwords and MFA codes in real time.