Topic

Adversary-in-the-middle

A phishing method that proxies a genuine sign-in page so the operator captures the password and the resulting session token, defeating many second factors.

Current clusters

security1 publisher

A fake ChatGPT Plus billing alert pushed up to 100,000 emails in a single day

Microsoft Threat Intelligence documents ChatGPT, Copilot, DeepSeek and Claude lures spanning phishing kits, adversary-in-the-middle credential theft, malvertising and fake GitHub installers. A broker it tracks as Storm-3075 resells the access it wins.

Publishers:microsoft.com

Reality

Evidence42
Adoption45
Hype gap+15
Incentives85
Confidence50