The campaign targets business users with Google-connected marketing and payment accounts. Browser-in-browser tricks can make a fake login appear authentic. The useful lesson is not to distrust every AI product, but to avoid signing in through an unverified ad landing page.
What to do: Use bookmarked official services and passkeys where possible; review Google connected-app access if something seems unfamiliar.
