Phishing Sites Impersonate AI Chatbots to Capture Credentials

Scammers are impersonating AI chatbots including ChatGPT and Gemini through a browser-in-the-browser technique that creates fake sign-in windows to capture login credentials and multi-factor authentication codes in real time. The phishing tactic targets users of the named AI chatbots by mimicking legitimate sign-in prompts.