Fake AI Event Invitations Use Phishing Kits to Target Microsoft and Google Accounts
Summary
Push Security reports that fake OpenAI, SpaceX and Anthropic event pages use Kali365 device-code phishing and VoidProxy AiTM attacks to steal Microsoft and Google credentials and sessions.
Key points
- Push Security says the campaign impersonates OpenAI, SpaceX and Anthropic events, offering rewards to lure employees into signing in with work accounts.
- The phishing pages use custom kits tracked as ZoomMock and MSDRoot to direct victims to the Kali365 and VoidProxy phishing services.
- Kali365 generates Microsoft device-authentication codes; after authorization, a VoidProxy page can capture passwords and session cookies.
- For Google sign-ins, VoidProxy acts as an adversary-in-the-middle proxy to capture credentials, MFA responses and session cookies.
- Push Security says it detected and blocked visits to the malicious registration pages in late October 2026; the article does not report confirmed victim account compromises.
- The article recommends avoiding device codes from unfamiliar sites, restricting device-code authentication when unnecessary, and using phishing-resistant MFA such as FIDO2 keys.
Article Details
- Attack Vectors
- Fake OpenAI, SpaceX, and Anthropic event invitations lure employees to registration pages offering rewards in exchange for signing in with corporate accounts.
- The operators use custom phishing kits tracked as ZoomMock and MSDRoot to create fake event pages that direct victims to the Kali365 and VoidProxy phishing services.
- The pages display a Cloudflare CAPTCHA before showing the registration forms, which Push Security says prevents automated security platforms from scanning the phishing site.
- For Microsoft sign-ins, Kali365 generates a device authentication code. After the victim approves it on Microsoft's legitimate device login site, the flow redirects to a VoidProxy Microsoft login page that can capture the password and session cookie.
- For Google sign-ins, VoidProxy proxies the login page and captures credentials, MFA responses, and session cookies.
- The phishing pages use links from trusted services, including Google and Zapier URL shorteners; how the attackers initially distribute the links is unclear.
- Defensive Notes
- Avoid entering Microsoft device authentication codes supplied by unfamiliar websites.
- Be cautious of event invitations that require signing in with a corporate account to claim rewards.
- Organizations can restrict device code authentication when it is not needed.
- Use phishing-resistant MFA, such as FIDO2 security keys, to help prevent session hijacking.
MITRE ATT&CK
T1056.003 · Web Portal CaptureThe phishing login pages and VoidProxy proxy capture credentials submitted during Microsoft and Google authentication.T1111 · Multi-Factor Authentication InterceptionVoidProxy captures MFA responses during proxied Google sign-ins.T1204.001 · Malicious LinkVictims follow the event-registration links and choose a corporate sign-in option, enabling the phishing flows.T1528 · Steal Application Access TokenKali365's Microsoft device-code phishing flow obtains authentication tokens after victims approve the device authorization request.T1539 · Steal Web Session CookieThe phishing services capture victims' authentication session cookies.T1550.004 · Web Session CookieThe article says captured authenticated sessions or session cookies let the operators bypass MFA.T1557 · Adversary-in-the-MiddleVoidProxy operates as an adversary-in-the-middle reverse proxy for Google sign-ins, relaying login forms and capturing credentials, MFA responses, and session cookies.T1566.002 · Spearphishing LinkFake event invitations and links to registration pages are used to lure employees into phishing attacks; the article says the initial link distribution is unclear.
Vendors
Products
ChatGPT ProOne phishing page advertises an OpenAI event titled "ChatGPT for Social & Digital Marketing Teams" that promises three months of ChatGPT Pro to participants.Google WorkspaceThis can then be used to access the user's resources and connected SSO applications, such as Microsoft 365, Salesforce, Google Workspace, Dropbox, Adobe, SAP, Slack, Zendesk, Atlassian, and many others.Grok HeavyAnother promotes a private SpaceX event on November 12, offering registrants either three months of Grok Heavy or a "SpaceX share."Microsoft 365 Apps for EnterpriseThis can then be used to access the user's resources and connected SSO applications, such as Microsoft 365, Salesforce, Google Workspace, Dropbox, Adobe, SAP, Slack, Zendesk, Atlassian, and many others.Microsoft EntraA device code phishing attack occurs when an attacker abuses the legitimate OAuth 2.0 device authorization grant flow to obtain authentication tokens for the victim's Microsoft Entra account.
Tools
Kali365is that the same phishing pages integrate two separate phishing-as-a-service (PhaaS) platforms, Kali365 and VoidProxy, to target Microsoft and Google accounts using different authentication attacks.MSDRootPush Security says the attackers use two custom phishing kits, tracked as ZoomMock and MSDRoot, to create fake event pages that then direct victims to the Kali365 and VoidProxy phishing services.VoidProxythe same phishing pages integrate two separate phishing-as-a-service (PhaaS) platforms, Kali365 and VoidProxy, to target Microsoft and Google accounts using different authentication attacks.ZoomMockPush Security says the attackers use two custom phishing kits, tracked as ZoomMock and MSDRoot, to create fake event pages that then direct victims to the Kali365 and VoidProxy phishing services.