Fake OpenAI, SpaceX event invites used in phishing attacks targeting Microsoft, Google accounts

Threat actors are leveraging fake event invitations for OpenAI, SpaceX, and Anthropic to conduct phishing campaigns, utilizing two phishing-as-a-service platforms to steal Microsoft and Google account credentials and session tokens. The attacks exploit employee trust in well-known tech brands, and the use of PHAAS indicates a commercialized, scalable threat. The full scope of affected organizations remains unclear, but the targeting of authentication sessions suggests potential for account takeover beyond credential theft.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works