Making Tech Headlines · Page 8
Fake Tech-Event Invitations Offer Employees an Exclusive Meeting With a Login Page
· New York time
Hackers are using fake invitations to OpenAI, SpaceX and Anthropic events to lure employees into phishing attacks, BleepingComputer reports. The campaign uses two phishing-as-a-service platforms to steal Microsoft and Google credentials and authentication sessions. The invitations borrow the appeal of prominent technology companies to make a message seem worth opening. The intended prize is not attendance at an event but access to accounts. An authentication session can be valuable to an attacker because it is associated with a user's signed-in activity. The campaign puts a familiar phishing premise in fashionable clothing. Instead of asking the recipient to respond to an obvious emergency, a bogus invitation can present itself as an opportunity. The brand name supplies a reason to pay attention, while the login request gives the attacker a chance to collect something useful. For employees, the important distinction is between an invitation's appearance and the destination it actually leads to. A polished event message is not evidence that its sign-in page belongs to the company named at the top. The technology industry's talent for making every announcement sound exclusive has given impersonators a convenient script. Their event may have no stage, no speaker and no refreshments, but the registration desk is extremely interested in your account.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.