Hackers Use Fake AI Event Invites to Steal Microsoft, Google Accounts

• Hackers use fake invites to OpenAI, SpaceX, and Anthropic events to conduct phishing attacks.
• The phishing campaign targets Microsoft and Google accounts using device-code phishing and MFA bypass techniques.
• Researchers warn that employee interest in AI tools is being exploited as a high-success phishing lure.
• Two different phishing-as-a-service platforms are being used in the attacks.
• The goal is to steal corporate credentials and authentication sessions.