Researchers at browser security firm Island have disclosed a 'human-operated phishing platform' that impersonates advertising products for OpenAI's ChatGPT, Google's Gemini, Anthropic's Claude, Perplexity, Manus and, most recently, Meta's Muse. The fake services promise campaign optimization, spend audits and business-account connections to advertisers.

Every lure is built around a single 'Connect' button. Clicking it opens a browser-in-the-browser (BitB) fake login window drawn inside the real browser: the inner window can display a trusted address like accounts.google.com or an Okta tenant while the outer browser stays on the attacker's domain. A live operator then steers the victim through re-entering passwords, SMS or authenticator codes, Google approval prompts or Okta pushes.

The latest lure, 'museads.ai', appeared September 16 — barely a week after Meta launched Muse. Island observed hundreds of victim submissions during its investigation and said the activity was still ongoing. Practical takeaway: check the address bar of your actual browser tab, not the one inside the page, before signing in anywhere that claims to connect your AI or ad accounts.