Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. The summary below says what is known so far.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
No technical write-up beyond the summary below yet.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions.
Read the original reportBleepingComputer(opens in a new tab)
Part of Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering
Pulse
Last change 3d ago · Recheck overdue since 6 Nov 2026, 23:04 UK time
- Story5 Nov 2026, 23:04 UK time · 3d ago
Linked reporting from BleepingComputer (independent original reporting).
Read source (BleepingComputer)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- BleepingComputerNews
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
- ProbableSummary fact75% confidence
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions.