An invitation to an exclusive AI event sounds flattering. Right now, it is more likely to be a trap.
Security researchers at Push Security have reported a wave of phishing campaigns that use fake invitations to events run by well-known AI companies, including OpenAI, Anthropic and SpaceX. According to TechRadar’s coverage of the report, one lure even offers free access to Grok Heavy, a paid AI service. The goal is to get staff to hand over their work logins for Microsoft and Google accounts.
Why this one is harder to spot
The report says attackers are combining several techniques, including device-code phishing, reverse proxies and ways of getting around multi-factor authentication (MFA). In plain terms, some of these attacks can take place on a real Microsoft or Google sign-in page, and some can capture your login even when you approve an MFA prompt. Having MFA switched on is still essential, but it does not make every account untouchable.
The researchers also warn that staff interest in AI tools is becoming a highly effective lure. People are curious about AI, and an invite to an exclusive event or a free upgrade is exactly the kind of message they want to click.
What to do this week
- Tell your team. Any unexpected invite to an AI event, beta or free AI subscription should be treated as suspicious, however professional it looks.
- Never enter a code you did not ask for. If a message asks you to type a code into a Microsoft or Google page to “confirm” or “register”, stop. Only enter a sign-in code when you started the sign-in yourself on your own device.
- Check the event independently. Go to the company’s own website rather than clicking a link in the message.
- Report, do not delete. Ask staff to forward suspicious invites to whoever manages your IT, so others can be warned.
- Review your sign-in settings. Microsoft 365 and Google Workspace both have settings that can limit risky sign-in methods and alert you to unusual logins. It is worth checking they are turned on.
Worried this affects your business? Get a free 15-minute IT check – call Trends IT on 0485 011 911 or visit /contact/.