Threat actors are leveraging fraudulent event invitations from prominent tech companies like OpenAI, SpaceX, and Anthropic to target enterprise employees. The campaign employs phishing-as-a-service platforms designed to harvest credentials and hijack active authentication sessions for Microsoft and Google accounts. Security teams should monitor for these targeted social engineering techniques.

phishingcredential-theftsession-hijackingphass
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →