# Kali365

Published articles for Kali365.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts

DevFeed: [Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts](<https://devfeed.tech/articles/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts-119595.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts/>)

Author: Lawrence Abrams

Published: 2026-11-05T21:30:30Z

Content type: news

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [account takeover](<https://devfeed.tech/topics/account-takeover.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [Google](<https://devfeed.tech/topics/google.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [account](<https://devfeed.tech/tags/account.md>), [adversary-in-the-middle](<https://devfeed.tech/tags/adversary-in-the-middle.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [device-code](<https://devfeed.tech/tags/device-code.md>), [employees](<https://devfeed.tech/tags/employees.md>), [events](<https://devfeed.tech/tags/events.md>), [fake](<https://devfeed.tech/tags/fake.md>), [google](<https://devfeed.tech/tags/google.md>), [hackers](<https://devfeed.tech/tags/hackers.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [infosec-computer-security](<https://devfeed.tech/tags/infosec-computer-security.md>), [kali365](<https://devfeed.tech/tags/kali365.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [mfa](<https://devfeed.tech/tags/mfa.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [openai](<https://devfeed.tech/tags/openai.md>), [phaas](<https://devfeed.tech/tags/phaas.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [phishing-as-a-service](<https://devfeed.tech/tags/phishing-as-a-service.md>), [phishing-attacks](<https://devfeed.tech/tags/phishing-attacks.md>), [platforms](<https://devfeed.tech/tags/platforms.md>), [security](<https://devfeed.tech/tags/security.md>), [sessions](<https://devfeed.tech/tags/sessions.md>), [spacex](<https://devfeed.tech/tags/spacex.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [voidproxy](<https://devfeed.tech/tags/voidproxy.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

Fake event invitations promising premium AI access or other rewards direct employees to registration pages that require corporate sign-in. The pages combine two phishing services: Kali365 uses Microsoft device-code authorization to obtain authentication tokens, then VoidProxy can capture Microsoft credentials and session cookies; for Google, VoidProxy proxies sign-in to steal credentials, MFA responses, and session cookies. A Cloudflare CAPTCHA helps keep automated scanners from reaching the pages. The excerpt says Push Security detected and blocked visits in late October 2026, but does not establish how the links were initially distributed. It recommends avoiding unfamiliar device codes, treating reward-linked work-account sign-ins cautiously, restricting device-code authentication where unnecessary, and using phishing-resistant MFA such as FIDO2 keys.

### Source excerpt

Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]