Fake OpenAI and SpaceX events used in multi-platform phishing campaign

# Fake OpenAI and SpaceX events used in multi-platform phishing campaign

https://gcdradar.vercel.app/incidents/fake-openai-and-spacex-events-used-in-multi-platform-phishin · AIR-2026-1797 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed active phishing campaign stealing corporate accounts.
- Fix status: No fix needed
- First reported: 2026-11-05
- AI role: AI-enabled attack
- Products: Google Workspace, Microsoft 365

## Summary

Threat actors are distributing fake webinar and event invitations featuring OpenAI, SpaceX, and Anthropic lures. The campaigns use phishing-as-a-service platforms to harvest Microsoft and Google account credentials and session tokens.

## What to do

Warn employees to verify event invitations and enforce phishing-resistant MFA.

## Latest updates

- 2026-11-05: Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts (https://bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts)

## Sources

- 2026-11-05 BleepingComputer: Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts https://bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.