Hackers use fake AI event invites to steal accounts

Security researchers Push Security report threat actors launched a phishing campaign in July 2026 using fake event invites from OpenAI, SpaceX, and Anthropic to steal Microsoft and Google accounts. The scheme lures victims with offers like free ChatGPT Pro subscriptions or access to Grok Heavy, tricking them into sharing credentials via Kali365 and VoidProxy platforms that bypass multi-factor authentication controls.