Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
The phishing pages use two services to steal tokens, credentials and session cookies, letting attackers bypass multifactor authentication, researchers said.
5 Articles
5 Articles
Phishing Campaign Uses Fake OpenAI and SpaceX Events to Steal Microsoft and Google Credentials
A sophisticated phishing campaign is currently leveraging high-profile corporate themes, including fake OpenAI, SpaceX, and Anthropic events, to simultaneously compromise Microsoft and Google accounts. Security researchers have identified a “multimodal” approach where attackers chain disparate Phishing-as-a-Service (PhaaS) platforms—specifically Kali365 and VoidProxy—to target multiple cloud ecosystems within a single campaign. The operation rep…
BleepingComputer
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]
Criminals use fake events from OpenAI, SpaceX and Anthropic to steal corporate accounts from Microsoft and Google. The campaign combines Kali365 and VoidProxy kits to explore OAuth device codes, intercept multifactor authentications and hijack sessions. Understand how the coup works and what measures help protect companies against these attacks.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
