Threat actors are leveraging fraudulent event invitations from prominent tech companies like OpenAI, SpaceX, and Anthropic to target enterprise employees. The campaign employs phishing-as-a-service platforms designed to harvest credentials and hijack active authentication sessions for Microsoft and Google accounts. Security teams should monitor for these targeted social engineering techniques.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →