Hackers Steal Microsoft Credentials With Fake Anthropic Previews as Google Logins Also Targeted
Updated
Updated · Computerworld · Oct 29
Hackers Steal Microsoft Credentials With Fake Anthropic Previews as Google Logins Also Targeted
3 articles · Updated · Computerworld · Oct 29
Summary
Cofense identified a phishing campaign that lures enterprise users with fake invite-only Anthropic preview emails and steals Google and Microsoft credentials through spoofed registration and login pages.
GoTo Webinar branding helps the emails evade suspicion, while URL shorteners, compromised links and 2 CAPTCHA checkpoints block scanners, VPNs and Tor-based analysis before victims reach the fake pages.
Microsoft targets lose both usernames and passwords, while the Google spoof appears to capture only usernames because of a likely misconfiguration; either way, attackers can use stolen access to move deeper into corporate systems.
Researchers flagged small clues—“Austin from nthropic,” mixed GoTo Webinar, Zoom, Google and Microsoft branding, and deceptive domains like office[.]com-access-sharepoint[.]com—as signs defenders should train users to catch.
Dickson said AI waitlists and private previews prime employees for this lure, making phishing-resistant MFA, credential resets and independent verification of AI invites more important than relying on workers to spot every fake.