AI Incident Database: AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign
Attackers reportedly exploited Gamma, an AI-powered presentation tool, to create convincing presentation pages that hosted links to a spoofed Microsoft SharePoint login portal. The phishing flow allegedly used compromised email accounts, Cloudflare Turnstile for bot evasion, and adversary-in-the-middle (AiTM) tactics to validate credentials in real time and capture session cookies. The campaign aimed to bypass MFA and compromise accounts.
AI Incident Database · Incident 1068Operator lens (medium): inspect D2 (output validation), D7 (tool permissions).
Event summary
Attackers reportedly exploited Gamma, an AI-powered presentation tool, to create convincing presentation pages that hosted links to a spoofed Microsoft SharePoint login portal. The phishing flow allegedly used compromised email accounts, Cloudflare Turnstile for bot evasion, and adversary-in-the-middle (AiTM) tactics to validate credentials in real time and capture session cookies. The campaign aimed to bypass MFA and compromise accounts.
Linked entities
- gamma
organisation | 70%
- unknown-threat-actors
organisation | 70%
- unknown-threat-actors-leveraging-gamma
organisation | 70%
- unknown-aitm-phishing-campaign-actors
organisation | 70%
- Microsoft
vendor | 70%
- microsoft-sharepoint-users
organisation | 70%
- recipients-of-phishing-emails-sent-from-compromised-accounts
organisation | 70%
- enterprises-relying-on-microsoft-365-and-identity-services
organisation | 70%
- organizations-whose-employees-interacted-with-gamma-hosted-phishing-content
organisation | 70%
Related graph edges
| Edge | Type | Confidence |
|---|---|---|
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d2 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-vendor-microsoft to ent-psf-d6 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d2 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d2 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d2 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d7 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d7 | maps to | 60% |
| ent-aiid-gamma to ent-psf-d7 | maps to | 60% |