Cybercriminals are impersonating popular AI chatbots including ChatGPT, Claude, and Perplexity to conduct phishing attacks targeting user passwords and API keys. The deceptive campaigns exploit users’ familiarity with these platforms to trick them into revealing sensitive authentication credentials. Security researchers have flagged the threat as part of an ongoing trend of threat actors leveraging AI tool popularity for malicious purposes.