Researchers found fake ChatGPT, Gemini, and Claude ad tools that copy real login screens and relay your MFA codes to a live attacker. Here is how the trick works and how to protect your accounts.