Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
What happened
Hackers are running phishing campaigns that masquerade as events from OpenAI, SpaceX and Anthropic, using fake registration pages that ask visitors to sign in with their corporate Microsoft or Google accounts. The pages combine two phishing‑as‑a‑service platforms: Kali365, which performs Microsoft device‑code attacks, and VoidProxy, which acts as an adversary‑in‑the‑middle to steal Google authentication cookies. The attackers also employ custom kits called ZoomMock and MSDRoot to build the bogus event sites, and they distribute the links via trusted services such as Google and Zapier shorteners, as well as GoTo Webinar and Zoom. Push Security detected and blocked the campaign in late October 2026 after it redirected victims through Cloudflare CAPTCHAs and then to the phishing services.
Why it matters
Ordinary employees may receive seemingly legitimate event invitations and be tricked into handing over work credentials, exposing their companies to account takeover. Recognizing such fake event emails can help prevent credential theft.
Reality check
An automated, sceptical read of the sourceIncremental. The technique builds on known device‑code and AiTM phishing methods, merely applying them to high‑profile AI event themes.
Is this a big deal?
Get stories like this every morning
The day's AI news in plain English, in your inbox at 8:30 IST. Free.
More from OpenAI
Introducing ChatGPT WalletOpenAI · 13 Nov 2026Shield helps technicians hand off legacy portal work with OpenAIOpenAI · 13 Nov 2026OpenAI launches ChatGPT Wallet, AI agents pay for purchaseOpenAI · 13 Nov 2026OpenAI disbands its robotics team as its general models start running robotsOpenAI · 13 Nov 2026Yang-Mills, OpenAI proof, and the mass gap problemOpenAI · 13 Nov 2026This page was collected from bleepingcomputer.com and summarised automatically by AIPulsee's pipeline. See how it runs.