Phishing Sites Impersonate AI Tools to Steal Ad Accounts, MFA Codes

A phishing campaign that impersonates AI tools has harvested hundreds of victim submissions, stealing advertising accounts and multi-factor authentication codes, according to a report on the operation. The scammers use a browser-in-the-browser technique to present fake login prompts that closely mimic legitimate sign-in pages and are difficult to detect.