Perplexity (Product): news timeline & CVEs

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Fake ChatGPT, Gemini, Claude, and Perplexity sites use browser-in-the-browser phishing to steal ad-account logins and MFA codes.

Island researchers reported a phishing campaign impersonating ChatGPT, Gemini, Claude, Perplexity, and Meta's Muse agent to target advertising account managers. A connect button opens a browser-in-the-browser fake Google window that collects credentials, while human operators request SMS or authenticator codes, Okta pushes, Google prompts, or QR codes. The same operation uses recruitment and refund lures, a shared Next.js and Socket.IO stack, and dozens of URLs. Misconfigured GitHub repositories traced it to March, and a Telegram channel received hundreds of victim submissions.

BleepingComputerupdated Oct 7, 09:21 UTC · 1d agofirst Oct 6, 15:16 UTC · 2d agoPhishing & fraud in the wild 4 sources

Portnox detects and removes unauthorized AI applications from managed devices

Portnox introduced a tool to automatically detect and remove unauthorized Shadow AI applications from managed devices to enforce security policies.

Portnox has announced new capabilities for its network access control platform to detect and automatically manage unauthorized AI applications, addressing the 'Shadow AI' risk. The tool can identify leading generative AI apps and agents on managed devices and enforce security policies by restricting, quarantining, or removing them in real-time. This feature aims to give IT teams control over the growing use of autonomous AI tools that access enterprise data and resources.

Help Net SecuritySep 23, 13:49 UTC · 15d agoTools

Perplexity

Timeline2 articles

Appears with

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Portnox detects and removes unauthorized AI applications from managed devices