Scammers use fake AI sites and browser tricks to steal user login details

Cybersecurity researchers have identified a sophisticated phishing campaign utilizing "browser-in-browser" techniques to harvest user credentials and multi-factor authentication codes. The attackers are impersonating several prominent AI platforms, including ChatGPT, Claude, Gemini, Perplexity, and Manus. Most recently, the group integrated a fraudulent "Muse Ads" website, launched just days after Meta's official announcement of its Muse personal AI agent, to target advertising professionals.

This evolving threat demonstrates how quickly malicious actors can weaponize timely corporate news to build credibility. By repurposing existing infrastructure to mimic legitimate services, scammers can rapidly deploy convincing fake interfaces that deceive even cautious users. For organizations, these attacks highlight a growing need to bolster security awareness and technical defenses against highly adaptive social engineering tactics that exploit the rapid rollout of new digital tools.