Push Security reported in late October 2026 that a phishing campaign is impersonating OpenAI, SpaceX, and Anthropic with fraudulent event invitations designed to steal corporate Microsoft and Google account credentials. The security firm said it detected and blocked visits to the malicious registration pages on its customers' browsers during that period.
How the campaign works #
The attackers create convincing event registration pages promising free access to premium AI tools. Push Security documented three examples:
- A fake OpenAI event advertised a November 4 livestream called "ChatGPT for Social & Digital Marketing Teams," offering three months of ChatGPT Pro to participants.
- A SpaceX invitation-only briefing scheduled for November 12 promised visitors a choice between three months of Grok Heavy or a "SpaceX share."
- An Anthropic event at "AWS re 2026" was identified but no longer active when researchers investigated it.
Push Security emphasized it did not suggest OpenAI, SpaceX, or Anthropic operated these fraudulent events [1][2].
The registration pages require visitors to sign in with corporate Microsoft or Google accounts to "complete registration and claim the promised rewards." This requirement is the entry point for credential theft.
Technical mechanisms #
The campaign routes victims through legitimate services to disguise the final destination. Push Security found shortened links associated with Google and Zapier; earlier related attacks used Zoom event pages and GoTo Webinar email infrastructure. Once on the malicious site, visitors encounter a Cloudflare security challenge—legitimate technology that also hinders automated security scanners.
After the challenge, the site presents "Continue with Microsoft" and "Continue with Google" buttons, each triggering a different attack chain.
Microsoft path: Selecting Microsoft connects to Kali365, a phishing-as-a-service platform. Kali365 generates a Microsoft device authentication code and instructs the victim to copy it and enter it on Microsoft's legitimate sign-in page. Because the attacker initiated the authentication request, approving the code grants the attacker authentication tokens that can provide access to Microsoft 365 resources without the account password. Push Security found the campaign then redirects Microsoft users to a second phishing service, VoidProxy, which attempts to capture the password and authenticated session cookie.
Google path: Selecting Google opens a pop-up appearing to show Google's sign-in screen, but the login process runs through VoidProxy as an intermediary. The service can capture credentials, intercept certain multifactor authentication responses, and steal session cookies—digital passes that allow continued access without re-entering passwords.
Infrastructure and attribution #
Push Security identified two phishing kits used to create the fake event pages, dubbed ZoomMock and MSDRoot. Researchers found evidence suggesting the same operators were responsible for both kits, though the connection was not conclusively established. They found no evidence linking the developers of Kali365 and VoidProxy, and believe the campaign operators are customers of both services.
The fraudulent pages can automatically display content in a visitor's language, allowing regional adaptation without building new sites.
What remains unknown #
Push Security's report did not establish how many accounts, if any, were successfully compromised. Researchers have not confirmed the initial delivery method for every invitation in the newer campaign. The connection between the two phishing kit operators is not conclusive.
Vendor responses #
A Microsoft spokesperson said: "We take reports of malicious online activity seriously and continuously work to help protect our customers from evolving threats. Microsoft Defender includes detections to block the threats identified in the report." Google, OpenAI, Anthropic, and SpaceX did not respond to requests for comment before the reporting deadline [1][2].
Significance #
The campaign demonstrates how attackers combine legitimate services (Google URL shorteners, Zapier, Cloudflare, Microsoft's own device authentication flow) with phishing-as-a-service platforms to create credible-looking attacks that can bypass multifactor authentication. The use of real Microsoft authentication pages—where the URL is genuine but the request was initiated by an attacker—makes detection difficult for employees accustomed to legitimate device sign-in flows.
Microsoft recommends restricting device code authentication wherever it isn't necessary; IT administrators can apply those restrictions through Microsoft Entra Conditional Access policies after reviewing legitimate business needs. The article also recommends phishing-resistant authentication such as FIDO2 security keys or passkeys as a stronger defense, though no single measure stops every attack vector.
Sources #
1. [Fake AI event invites target Microsoft and Google logins](https://www.foxnews.com/tech/fake-ai-event-invites-target-microsoft-google-logins) (foxnews.com)
2. [Fake AI event invites target Microsoft and Google logins](https://cyberguy.com/security/fake-ai-event-invites-target-microsoft-google-logins) (cyberguy.com)
- Four nonprofits sue Anthropic, OpenAI, Google, Meta and SpaceX to freeze ... (pasqualepillitteri.it)