Phishing Emails Push Fake ChatGPT and Gemini iOS Apps To Steal Logins
## Cybersecurity: Phishing Campaign Targets iOS Users with Fake AI Apps
Cybersecurity: Phishing Campaign Targets iOS Users with Fake AI Apps
A phishing campaign has been identified targeting iPhone users by impersonating AI platforms, ChatGPT and Gemini. The attackers are distributing emails that direct recipients to download fraudulent applications via the Apple App Store.
The malicious apps are presented as legitimate AI tools, but they instead facilitate credential harvesting by capturing Facebook login details once installed.
The operation begins with emails that mimic correspondence from ChatGPT or Gemini. These emails are crafted to appeal to professionals and suggest the apps are business tools. Recipients are redirected to the App Store, exploiting users' trust in this platform.
Security analysts have identified two fake applications: GeminiAI Advertising (App Store ID: id6759005662 ) and Ads GPT (App Store ID: id6759514534 ), both available on the Australian App Store.
Upon launching either app, users encounter a misleading Facebook login screen rather than the advertised AI features. Submitted credentials are sent to the attackers, granting them access to the user's Facebook accounts.
A phishing campaign has been identified targeting iPhone users by impersonating AI platforms, ChatGPT and Gemini.
This approach marks a shift from traditional phishing tactics by leveraging official app marketplaces to enhance the campaign's credibility.
Users should scrutinize unsolicited emails promoting AI apps, verify email addresses, and research app developers. Enabling two-factor authentication on social media accounts offers additional security.
Organizations are advised to educate employees on identifying phishing attempts and encourage reporting of suspicious activities.
Type Indicator Context
Malicious App URL hxxps[://]apps[.]apple[.]com/au/app/geminiai-advertising/id6759005662 Fake GeminiAI Advertising app on AU App Store
Malicious App URL hxxps[://]apps[.]apple[.]com/au/app/ads-gpt/id6759514534 Fake Ads GPT app on AU App Store
Based on reporting by Cyber Security News.
