Will fake AI chatbot phishing campaign compromise 500+ ad account MFA credentials by Dec 2026?

Campaign using fake ChatGPT, Gemini, Claude, Perplexity sites to steal ad account login credentials and MFA codes via browser-in-browser attacks. Targets account managers responsible for major ad spend. Evidence from Bleeping Computer.

Resolution Criteria

Official disclosure by Google, Meta, Microsoft, or OpenAI of confirmed compromised accounts from this campaign; or third-party security research documenting 500+ confirmed victim credentials stolen via fake AI sites with MFA bypass.