Fake Conferences: A Phishing Campaign Targets "Google" and "Microsoft" Users

A security report by "Bush Security" has uncovered a phishing campaign that impersonates technology companies such as "OpenAI", "SpaceX", and "Anthropic", targeting the accounts of Google and Microsoft employees through fake invitations to AI conferences, using the "Kali 365" and "Void Proxy" platforms to bypass multi-factor authentication.

A security report by "Bush Security" has uncovered a phishing campaign that impersonates prominent technology companies such as "OpenAI", "SpaceX", and "Anthropic", aiming to lure employees through fake invitations to conferences and events related to artificial intelligence. The campaign targets the takeover of institutional user accounts at "Google" and "Microsoft" using the phishing platforms "Kali 365" and "Void Proxy", which are capable of bypassing multi-factor authentication methods. The company's researchers detected fake registration pages offering events that appear to be organized by well-known AI companies, asking visitors to use their work accounts to confirm participation or obtain exclusive rewards. Among the discovered pages is a site impersonating the "OpenAI Academy" and promoting the use of "ChatGPT" in marketing teams, promising participants a free three-month subscription to the "ChatGPT Pro" service. They also detected a page impersonating "SpaceX" offering an invitation to a private briefing on the "Starship" project, enticing visitors with a subscription to "Grok Heavy" service or a share of the company's stock. The campaign extended to impersonating "Anthropic" by promoting an event related to the "IHWSRNFNT" conference.