Fake OpenAI, SpaceX and Anthropic event invitations used in phishing attacks
PHISHINGAnthropicredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A phishing campaign uses fake OpenAI, SpaceX and Anthropic event invitations to lure employees, relying on two phishing-as-a-service platforms to steal Microsoft and Google credentials and session tokens. Session token theft can bypass multi-factor authentication, so defenders should watch for suspicious sign-ins and revoke active sessions where compromise is suspected. The article does not give CVE identifiers, indicators of compromise or specific platform names.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Be wary of unexpected event invitations, especially those claiming to come from AI or tech companies, and check them through official channels before clicking.
- Use phishing-resistant multi-factor authentication where possible and review active sessions on Microsoft and Google accounts.
- Report suspicious invitations to your IT or security team.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer