Phishing with fake Anthropic AI beta invitations targets enterprise employees eager to try new products
Cofense discovered a phishing campaign that impersonates a private Anthropic beta invitation, using branded GoTo Webinar emails to lure enterprise employees into clicking, ultimately stealing Google and Microsoft login credentials. The attack uses URL shorteners and two Cloudflare CAPTCHA pages to block security scans; the fake Google page collects only usernames, while the fake Microsoft page collects both usernames and passwords. Researchers recommend enabling phishing-resistant MFA such as passkeys, and watching for subtle spelling flaws such as the sender "Austin from nthropic".
Cofense discovered a phishing campaign that impersonates a private Anthropic beta invitation, using branded GoTo Webinar emails to lure enterprise employees into clicking, ultimately stealing Google and Microsoft login credentials. The attack uses URL shorteners and two Cloudflare CAPTCHA pages to block security scans; the fake Google page collects only usernames, while the fake Microsoft page collects both usernames and passwords. Researchers recommend enabling phishing-resistant MFA such as pa
Matched fieldsTitle、Summary、Body
