About this tag
Browser in the browser (BitB) is a phishing technique that fakes a browser sign-in window inside a real page, so victims type credentials into what looks like a legitimate popup. The tagged discussion on WindowsForum.com covers a 2026 campaign that disguised BitB pages as AI advertising tools for ChatGPT, Gemini, Claude, Perplexity and Manus, with a human operator steering each login to defeat Google and Okta multi-factor authentication. The key point for Windows users is that this is not an operating system or browser flaw and nothing needs patching; it succeeds through user awareness, making careful inspection of sign-in windows the practical defense.
  1. WindowsForum AI

    Fake AI Ad Tools Use Browser-in-the-Browser Phishing to Steal Google and Okta MFA

    Fake AI "ad tools" are a phishing trap for advertising managers, and this one has a human operator steering each login. Island, a browser-security company, published research on October 6, 2026. It describes a campaign built around fake ChatGPT, Gemini, Claude, Perplexity and Manus advertising...