Fake OpenAI and SpaceX Event Invitations Used in Phishing Campaigns

Tier D · Background noise – Good to know

Who’s exposed: Employees targeted by fake OpenAI, SpaceX and Anthropic event invitations

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild · Full takeover · Secrets exposed

The Brief

Attackers are sending fake OpenAI, SpaceX and Anthropic event invitations to lure employees into phishing attacks.
Two phishing-as-a-service platforms are being used to steal Microsoft and Google account credentials and authentication sessions.

Why it matters

Stolen credentials and authentication sessions can give attackers access to employee Microsoft and Google accounts, so event invitations from AI and space companies should be verified before anyone clicks.

The checklist behind the tier

Checklist · 3 of 10 yes

No	Hits tech teams	Phishing campaign impersonating OpenAI, SpaceX and Anthropic; no developer platform breached.
No	Core infrastructure	Impersonated brands only; no core infrastructure software is compromised.
No	Popular tool	Popular brands are impersonated in lures; no tool or package is flawed or compromised.
Yes	Exploited in the wild	BleepingComputer: hackers use fake event invitations in phishing attacks stealing account credentials.
No	Public exploit	BleepingComputer reports phishing-as-a-service lures; no exploit code or PoC mentioned.
No	Remote, no login	Victims must be lured into clicking invitations; no unauthenticated access is described.
Yes	Full takeover	BleepingComputer: attackers steal Microsoft and Google account credentials and authentication sessions.
Yes	Secrets exposed	BleepingComputer: attackers stole Microsoft and Google account credentials and authentication sessions.
No	Supply chain	No legitimate package, update, build pipeline or signing key is reported compromised.
No	No fix yet	This is a phishing campaign, not a vulnerability, so no patch applies.

Source

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts ↗ BleepingComputer · 15h ago

First seen 15h ago · 1 source · Full story page · How tiers are decided