AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign

Attackers reportedly exploited Gamma, an AI-powered presentation tool, to create convincing presentation pages that hosted links to a spoofed Microsoft SharePoint login portal. The phishing flow allegedly used compromised email accounts, Cloudflare Turnstile for bot evasion, and adversary-in-the-middle (AiTM) tactics to validate credentials in real time and capture session cookies. The campaign aimed to bypass MFA and compromise accounts.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves threat actors using an AI platform to host highly convincing phishing pages to steal user credentials and session cookies for personal gain.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The phishing campaign successfully harvests sensitive Microsoft login credentials and session cookies, compromising user account privacy.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident is caused by human threat actors who intentionally abuse the deployed Gamma AI platform to host malicious phishing redirectors.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: Gamma is an AI-powered content generation platform used to create presentations and websites. Under the EU AI Act, systems that generate or manipulate content (AI-generated content) are classified as Limited Risk and are subject to transparency obligations.

AI system and alleged parties

• AI system: Gamma
• AI purpose: Writing Assistant; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Gamma
• Alleged deployer: Unknown threat actors leveraging Gamma, Unknown threat actors, Unknown AiTM phishing campaign actors
• Alleged harmed parties: Recipients of phishing emails sent from compromised accounts, Organizations whose employees interacted with Gamma-hosted phishing content, Microsoft SharePoint users, Microsoft, Gamma, Enterprises relying on Microsoft 365 and identity services

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Minor
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes malicious phishing redirect pages and spoofed login portals hosted on Gamma's domain.

Directly caused: Threat actors created malicious presentation pages on Gamma's platform (gamma.app) designed to deceive users and redirect them to credential-harvesting sites.

Inferred additional harm: It is likely that numerous distinct phishing campaigns and malicious presentations have been generated using the platform, exposing many corporate users to malicious content.

Privacy

Reported: The report explicitly describes privacy violations through the harvesting of Microsoft login credentials and session cookies.

Indirectly caused: The campaign allowed attackers to capture session cookies and credentials, leading to unauthorized access to corporate accounts and potential exposure of sensitive personal and organizational data.

Inferred additional harm: It is highly likely that multiple corporate accounts were compromised, resulting in unauthorized access to private emails, documents, and personal information of employees.

People affected

• Occurrences reported: 1

Potential causes

Management

• Inadequate Abuse Detection Systems: Platform lacked robust processes to detect and disable malicious content.
• Lag in Security Training Updates: Cybersecurity education fails to cover lesser-known tools like Gamma.

Technology

• AI Website Cloning Feature: Gamma allows cloning websites from URLs, easing phishing page creation.
• Real-time AiTM Framework: Captures credentials and session cookies to bypass MFA protections.
• Cloudflare Turnstile Abuse: Legitimate CAPTCHA blocks security scanners and increases trust.

Data Inputs

• Legitimate Compromised Accounts: Initial emails sent from hacked accounts pass SPF/DKIM checks.
• Trusted Domain Whitelisting: Security tools whitelist gamma.app, allowing malicious links to pass.
• Impersonated Brand Assets: Use of official logos on Gamma pages increases perceived legitimacy.

Human Factors

• Trust in Familiar Security Checks: Users trust Cloudflare Turnstile, lowering their suspicion.
• Unfamiliarity with Gamma Platform: Users do not recognize Gamma, failing to spot it as an exploit vector.
• Afternoon Alertness Slump: Timing of attacks during late afternoon exploits lower employee alertness.

Process and Methods

• Multi-Stage Redirection Path: Layered redirection hides the final destination from static analysis tools.
• Out of Platform Link Sharing: Copying links instead of sending via Gamma bypasses content scanning.
• Lack of Outbound Warning Banners: Gamma lacked warning banners when redirecting users to external sites.

Information quality

• Classification confidence: High
• Reason for confidence: The reports are consistent, detailed, and from reputable cybersecurity sources (Abnormal Security, Dark Reading, etc.). They clearly outline the attack vector, the role of the AI platform, and the security implications.
• Ambiguities identified: The exact number of victims and the specific organizations targeted are not detailed.

Threat actors are weaponizing the AI-powered presentation tool Gamma to host sophisticated phishing redirect pages and harvest Microsoft SharePoint credentials. While the technique represents an evolved cyber threat that bypasses traditional security filters, its overall national security impact remains minor and manageable within standard cybersecurity procedures.

• Overall national security impact: Minor
• Scope: Unknown
• Primary target: Unknown
• Other affected: Unknown
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing cybersecurity capability concern rather than an immediate national security crisis.
• Autonomy: Human-controlled. The AI tool is used as a content generation assistant under the direct control and intent of the human threat actors.
• Novelty: Evolved capability. Represents an evolution of phishing tactics, specifically abusing the trusted domains of new AI-powered SaaS tools to bypass security filters.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or kinetic threats are indicated in the incident reports.
• Information security: Minor. Threat actors abused an AI platform to host phishing pages to harvest credentials, representing a minor information security threat but no systematic intelligence compromise.
• Sovereignty: Negligible. No evidence of threats to state authority, electoral systems, or core government operations.
• Economic security: Minor. Unauthorized access to corporate accounts poses potential economic risks to affected entities, but lacks systemic impact on national economic security.
• Societal stability: Negligible. No threats to social cohesion, civil liberties, or widespread societal stability are indicated.