Fake OpenAI, SpaceX and Anthropic event pages are tricking employees into handing over Microsoft and Google work sessions, even with two-step login on.
Attackers are sending out fake invitations to events that appear to come from OpenAI, SpaceX and Anthropic. The pages promise free prizes, then ask people to sign in with their work account. Doing so can give the attackers access to that account, even when two-step login is turned on. Security firm Push Security reported the campaign, and it says it blocked visits to the fake pages in late October 2026.
The fake registration pages look like real event sites. One advertises an OpenAI event called "ChatGPT for Social & Digital Marketing Teams" and offers three months of ChatGPT Pro. Another claims to be a private SpaceX event on November 12 and offers three months of Grok Heavy or a "SpaceX share." A third, posing as an Anthropic event at AWS re:Invent 2026, has already been taken down.
Visitors first see a "Confirm you're not a robot" check. That step keeps automated security scanners from seeing the scam. Then the page says you must sign in with your work account to register and claim the reward.
The page offers two buttons: "Continue with Microsoft" and "Continue with Google." Each one uses a different method.
Both methods get around two-step login. With the Microsoft code trick, that check is skipped entirely. With the Google trick, the attacker copies a login that has already passed it.
A stolen work session can open email, files and connected apps. The report lists Microsoft 365, Salesforce, Google Workspace, Dropbox, Adobe, SAP, Slack, Zendesk and Atlassian as examples. One click on a prize offer could expose much of a person's workday, and a company's data with it.
People who never sign in to work accounts through links in invitations are in a much better position. The scam depends on that step. It is still unclear how the attackers first send out the links. Push Security found they use trusted link shorteners from Google and Zapier, so a familiar-looking link is not proof of safety. Earlier versions of this scam spread through GoTo Webinar emails and real Zoom event pages.
The steps in the alert box above cover what employees and IT teams should do now. The short version: a free prize is never a reason to use a work login.
Never use a work account to register for an event or claim a free reward, and never enter a Microsoft code from a site you do not know.
A user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websitesThe Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone number
