gcdRadar
closedclosed 29 Apr 2025Breaches & attacks3 Confirmed exploitationAI

AI Presentation Tool Gamma Abused in Credential Phishing Campaign

Gamma

Threat actors exploited the AI presentation tool Gamma to host phishing pages mimicking Microsoft SharePoint. The campaign leveraged adversary-in-the-middle tactics and bot evasion to capture credentials and session cookies.

first report
15 Apr 2025
last update
15 Apr 2025

Timeline · 1

  1. 15 Apr 2025AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign

Sources · 1

Research and catalogues

  1. 2025-04-15
    AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign
    AI Incident Database · incidentdatabase.ai/cite/1068

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI phishing / social engineering
severity
3 · Confirmed exploitation
targets
Enterprise deployment
owasp llm top 10
no entry for these categories
dates
happened 15 Apr 2025 · first reported 15 Apr 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# AI Presentation Tool Gamma Abused in Credential Phishing Campaign

https://gcdradar.vercel.app/incidents/ai-presentation-tool-gamma-abused-in-credential-phishing-cam · AIR-2025-0136 · closed 2025-04-29

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-04-15
- AI role: AI-enabled attack
- Products: Gamma

## Summary

Threat actors exploited the AI presentation tool Gamma to host phishing pages mimicking Microsoft SharePoint. The campaign leveraged adversary-in-the-middle tactics and bot evasion to capture credentials and session cookies.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-04-15: AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign (https://incidentdatabase.ai/cite/1068)

## Sources

- 2025-04-15 AI Incident Database: AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign https://incidentdatabase.ai/cite/1068

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    FBI Warns of AI Voice Cloning Campaign Targeting Officials

    Breaches & attacks · Exploited · since 15 May 2025

    AI
  2. closed
    AI
  3. closed
    FBI Reports Adversarial AI Usage in Cyberattacks and Infrastructure Intrusions

    Breaches & attacks · Exploited · since 29 Apr 2025

    AI
  4. closed
    ChatGPT Scammers Use ChatGPT to Impersonate Students in Financial Aid Fraud

    Breaches & attacks · Real loss · since 22 Apr 2025

    AI
  5. closed
    Lovable Lovable AI Jailbroken to Host Phishing Pages and Credentials Theft

    Breaches & attacks · Exploited · since 9 Apr 2025

    AI
  6. closed
    AI