Security researchers are warning about a phishing campaign that uses fake invitations to AI-related events to steal access to people’s Microsoft and Google work accounts. The scheme impersonates well-known companies including OpenAI, SpaceX and Anthropic, and in some cases it can bypass extra security steps like multifactor authentication.
According to a report from Push Security, attackers built convincing event registration pages that mimic real tech companies. The firm says it detected and blocked visits to these malicious pages on its customers’ browsers in late October 2026.
One fake page advertised a November 4 livestream called “ChatGPT for Social & Digital Marketing Teams,” supposedly from OpenAI, and offered three months of ChatGPT Pro to anyone who registered. Another promoted a fake invitation-only SpaceX briefing for November 12, offering a choice between three months of Grok Heavy or something called a “SpaceX share.” Researchers also found a page impersonating an Anthropic event tied to AWS re 2026, though it was no longer active by the time they looked into it. Push Security made clear that none of these companies actually ran the events — they were only used to make the phishing pages look legitimate.
To register and claim the advertised reward, visitors are told they must sign in using their corporate Microsoft or Google account. That’s the moment the scam takes hold.
How the Scam Works
The attackers route victims through shortened links tied to Google and Zapier, and earlier versions of the campaign used legitimate Zoom and GoTo Webinar infrastructure to add credibility. Visitors then face a Cloudflare human-verification challenge — a familiar sight on legitimate sites, but one the attackers also use here to make automated security scans harder.
After that, the fake registration page offers two options: “Continue with Microsoft” or “Continue with Google.” Each one triggers a different attack.
Choosing the Microsoft option connects to a phishing-as-a-service tool called Kali365, which generates a real Microsoft device authentication code. The victim is told to enter that code on Microsoft’s actual sign-in page. Because the attacker initiated the authentication request, approving it hands Microsoft-issued tokens to the attacker — no password needed. Push Security found that victims are then redirected to a second service, VoidProxy, which tries to capture their password and session cookie, potentially exposing Microsoft 365 email, documents and other connected work applications.
Choosing the Google option opens a pop-up that looks like Google’s sign-in screen, but it’s actually running through VoidProxy, which sits between the victim and Google’s real authentication system. This lets the attacker capture login credentials, intercept some multifactor authentication responses, and steal session cookies — the digital tokens that let a website recognize you as already logged in. With a working session cookie, an attacker may not need a password at all to access the account.
Push Security’s report documented the infrastructure and the pages it blocked but did not determine how many accounts, if any, were successfully compromised.
Why It’s Hard to Spot
Researchers identified two phishing kits behind the fake event pages, which they call ZoomMock and MSDRoot, and found evidence suggesting the same operators built both, though that link wasn’t conclusively confirmed. They found no evidence connecting the developers of Kali365 and VoidProxy, and instead believe the campaign’s operators are simply customers of both services. The fake pages can also automatically display in a visitor’s own language, letting the same scam run across different regions without building new sites.
A Microsoft spokesperson told us: “We take reports of malicious online activity seriously and continuously work to help protect our customers from evolving threats. Microsoft Defender includes detections to block the threats identified in the report.” Google, OpenAI, Anthropic and SpaceX did not respond to requests for comment.
How to Protect Yourself
- If you get an unexpected invitation from a tech company, verify it independently — check the company’s official website or contact the organizer through information you find on your own, not through the invitation itself.
- Be skeptical of any offer that requires signing in with your work account to claim a reward, especially a tempting one like free premium software access.
- If a site asks you to copy a device authentication code and enter it on Microsoft’s sign-in page, stop and ask yourself whether you actually started that device sign-in process. If you were just registering for a webinar, that’s a red flag.
- Open Microsoft or Google directly through a bookmark or official site rather than clicking through a link, and remember that a padlock icon and HTTPS don’t guarantee a site is safe.
- Keep using multifactor authentication, but consider phishing-resistant options like FIDO2 security keys or passkeys for stronger protection, understanding that no method guarantees safety if an attacker obtains a valid session through another route.
- Keep antivirus software and browsers updated to catch known malicious links and pages, while recognizing that attackers constantly create new sites to dodge detection.
If you’ve already clicked a suspicious invitation and signed in, act quickly: change your password, review your account’s active sessions and sign out of unfamiliar ones, and report the incident to your IT or security team right away. The sooner it’s reported, the better the odds of limiting any damage.
Criminals are capitalizing on widespread interest in AI tools to make these scams more convincing, and the fact that part of this attack happens on Microsoft’s real sign-in page shows how far a well-built phishing campaign can go. Before registering for any AI-related event, take a moment to confirm it’s genuine.
