Phishing Sites Impersonate AI Chatbots to Capture Credentials

Scammers are impersonating AI chatbots including ChatGPT and Gemini through a browser-in-the-browser technique that creates fake sign-in windows to capture login credentials and multi-factor authentication codes in real time. The phishing tactic targets users of the named AI chatbots by mimicking legitimate sign-in prompts.

Scammers are now using a sneaky new tactic, impersonating popular AI chatbots like ChatGPT and Gemini to trick you into handing over your login credentials and multi-factor authentication codes. They're using a clever browser-in-the-browser technique to create fake sign-in windows that look legit, but can steal your info in real time.