Reported by 2 outlets
The story so far
AI summary of the reporting below · Updated · How we work
Cybercriminals are using fraudulent invitations to nonexistent events from OpenAI, SpaceX, and Anthropic to steal corporate credentials, according to research from Push Security. Discovered in late October 2026, the phishing scheme lures workers with promises of free access to Grok Heavy, three months of ChatGPT Pro, or SpaceX shares. Targets are instructed to log in using their enterprise accounts to register, putting their organization's sensitive access directly into the hands of hackers. [1][2]
The campaign relies on two phishing kits, tracked as ZoomMock and MSDRoot, paired with two phishing-as-a-service platforms named Kali365 and VoidProxy. Visitors choosing to sign in with Microsoft are guided through a device-code phishing flow that generates authentication tokens for the attacker, followed by a second stage that captures passwords and session cookies. Those selecting Google are routed through an adversary-in-the-middle reverse proxy operated by VoidProxy, which intercepts multi-factor authentication codes, passwords, and active session cookies in real time. [1][2]
To slip past automated scanning systems and security filters, the operators hid their landing pages behind Cloudflare CAPTCHAs and routed traffic through Google and Zapier link shorteners. Push Security warned that by exploiting intense employee interest in artificial intelligence tools alongside session-hijacking techniques, the threat actors can successfully circumvent the standard multi-factor authentication controls that many companies depend on. [1][2]
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions.
via BleepingComputer
No, you're not getting SpaceX shares - it's a trick to hand over your Microsoft 365 account credentials.
via TechRadar