Hackers Impersonating OpenAI Target Accounts With Fake Events

Hackers are sending fake event invitations impersonating major AI companies such as OpenAI, SpaceX and Anthropic in an effort to steal employees' Microsoft and Google account credentials. According to a new report by security firm Push Security, the attackers created convincing event registration pages posing as these companies. Push Security said it detected and blocked access to the malicious registration pages from customer browsers in late October 2026.

The fake OpenAI event advertised a live stream titled 'ChatGPT for Social & Digital Marketing Teams' on November 4, and lured participants to register with their work accounts by offering a three-month free ChatGPT Pro subscription. The fake website required users to log in with their corporate Microsoft or Google accounts to receive the promised reward, allowing the hackers to harvest login credentials. Some of the attacks were found to be capable of bypassing even existing security procedures such as multi-factor authentication.

The case highlights how phishing disguised as AI event invitations is emerging as a new threat to corporate account security.