SecurityFan score 7 · Tier D
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
BleepingComputer · By Lawrence Abrams ·
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]
The Brief
- Attackers are sending fake OpenAI, SpaceX and Anthropic event invitations to lure employees into phishing attacks.
- Two phishing-as-a-service platforms are being used to steal Microsoft and Google account credentials and authentication sessions.
Why it matters
Stolen credentials and authentication sessions can give attackers access to employee Microsoft and Google accounts, so event invitations from AI and space companies should be verified before anyone clicks.
Who’s affected
- Employees with Microsoft or Google accounts targeted by these lures
- #phishing
- #credential-theft
- #microsoft
- #social-engineering
