Hackers use fake OpenAI, SpaceX, and Anthropic event invites in new phishing scam to steal Microsoft and Google accounts
No, you're not getting SpaceX shares - it's a trick to hand over your Microsoft 365 account credentials.
Hackers are utilizing fake invitations from OpenAI, Anthropic, and SpaceX to carry out phishing scams aimed at stealing corporate credentials, particularly targeting Microsoft and Google accounts. According to security researchers Push Security, threat actors are creating fraudulent websites for nonexistent events such as OpenAI Academy livestreams, private SpaceX briefings on AI marketing, and Anthropic presentations at AWS re:Invent.
When individuals visit these pages and are offered free rewards like ChatGPT Pro subscriptions or access to Grok Heavy, they are prompted to log in using their Microsoft or Google accounts. This is where the scam unfolds; the victims inadvertently share their login credentials with the hackers. Push Security found that the attackers are employing device-code phishing, reverse proxies, and multi-factor authentication (MFA) bypass techniques to steal the login information.
The researchers warn that employees' eagerness to access cutting-edge AI tools makes them an attractive target for such attacks.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
