Hackers use fake tech event invitations to target corporate accounts
Attackers are impersonating brands like OpenAI and SpaceX in phishing campaigns designed to compromise Microsoft and Google corporate credentials.
FTMQ Security, written by our newsroom0 views
Hackers are sending fake event invitations impersonating OpenAI, SpaceX, and Anthropic to lure corporate employees into phishing attacks. BleepingComputer reported that the attackers are using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials as well as active authentication sessions. [1]
According to a report from Push Security, the attackers create convincing event registration pages. These pages attract victims by offering free access to premium artificial intelligence services and other rewards. [1]
OpenAI is an American artificial intelligence public benefit corporation headquartered in San Francisco, California. Microsoft provides personal email and webmail interface services through Outlook.com, which allows access to mail, calendars, contacts, and tasks. [2][4]
SpaceX acquired xAI in February 2026 to integrate its artificial intelligence capabilities, forming the business segment now branded as SpaceXSI. SpaceXSI operates the social media platform X and the Grokipedia online encyclopedia. [5]
In short
- Hackers are impersonating OpenAI, SpaceX, and Anthropic in fake event invitations to target employees.
- The phishing campaigns utilize two phishing-as-a-service platforms to capture Microsoft and Google credentials.
- Attackers steal both user credentials and active authentication sessions using fraudulent registration pages.
- The malicious landing pages entice victims by promising free access to premium AI services.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsBleepingComputer, 4h ago (the report this story comes from)
Background
- [2]OpenAI on Wikipedia
- [3]Gays Against Groomers on Wikipedia
- [4]Outlook.com on Wikipedia
- [5]SpaceX on Grokipedia
Our newsroom writes these reports with the help of software, from the 5 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Attackers Target OAuth Tokens to Bypass MFA and Password ResetsThreat Intelligence, 14d ago
- Compromised CDU Heilbronn email account used in phishing attack on officialsThreat Intelligence, 18d ago
- China Aligned TA419 Targets US AI Experts With Phishing AttacksTop Stories, 32d ago
- North Korean hackers target crypto executives using fake video meeting linksThreat Intelligence, 11d ago
- Hackers Abuse Microsoft Teams External Chat for Rapid Initial AccessTop Stories, 9d ago
More in Top Stories
- OpenAI research pipeline builds 948 Linux kernel root exploits1h ago
- Internal AI governance failures enabled record Binance cryptocurrency heist1h ago
- Crédit Mutuel Arkéa suffers supply chain breach and fund transfers1h ago
- SonicWall will not patch critical flaws in end of life GMS software1d ago
- APT package manager flaw enables root code execution on Debian and Ubuntu1d ago
- Global data breaches rose 13 percent in third quarter of 20261d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.