Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions, according to a new report from Push Security. The attackers use convincing event registration pages offering free access to premium AI services and other rewards to trick victims into signing in with their corporate accounts. The same phishing pages integrate two separate phishing-as-a-service platforms, Kali365 and VoidProxy, to target Microsoft and Google accounts using different authentication attacks. Kali365 conducts Microsoft device code phishing attacks, while VoidProxy acts as an adversary-in-the-middle reverse proxy to intercept Google sign-ins and steal authentication session cookies. The Microsoft attack also uses VoidProxy as a second stage, allowing attackers to capture credentials and session cookies after obtaining authentication tokens through Kali365. Push Security says it detected and blocked visits to the malicious event registration pages in late October 2026. Push Security found that attackers redirect victims to a malicious event registration page using links from trusted services, including Google and Zapier URL shorteners. Push Security says the attackers use two custom phishing kits, tracked as ZoomMock and MSDRoot, to create fake event pages that then direct victims to the Kali365 and VoidProxy phishing services. The campaign impersonates events hosted by OpenAI, SpaceX, and Anthropic. One phishing page advertises an OpenAI event titled "ChatGPT for Social & Digital Marketing Teams" that promises three months of ChatGPT Pro to participants.