A new wave of fraudulent AI advertising portals has been identified targeting six major chatbot platforms, siphoning multi‑factor authentication (MFA) codes from unsuspecting users. The attacks, reported on October 8, 2026, involve malicious actors embedding deceptive ad content that mimics legitimate AI services, prompting users to enter MFA tokens which are then harvested for credential‑stuffing campaigns.
Security analysts warn that the convergence of AI‑driven user interfaces and lax verification on chatbot ecosystems creates a fertile ground for such exploits. Organizations are urged to enforce stricter MFA handling policies, monitor for anomalous ad traffic, and educate users about the risks of entering authentication codes on unverified AI portals.
This story was written by a language model from reporting by AI & Machine Learning. Check the original before quoting it.