Understand this story
Cofense disclosed a phishing campaign that impersonates an Anthropic private beta invitation, using GoTo Webinar-branded emails to lure corporate employees into clicking, ultimately stealing Google and Microsoft login credentials. The attack used URL short links and two Cloudflare CAPTCHA pages to block security scans; the fake Google page collected only usernames, while the fake Microsoft page collected both usernames and passwords. Researchers recommend enabling phishing-resistant MFA such as passkeys, and watching for subtle spelling flaws such as the sender "Austin from nthropic".
AI-generated from public reports
Latest development · Report
Phishing with fake Anthropic AI beta invitations targets enterprise employees eager to try new productsDevelopments
1 confirmed developments
Cofense discloses phishing campaign impersonating Anthropic preview invitations
Source:Computerworld
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 29
Computerworld
Phishing with fake Anthropic AI beta invitations targets enterprise employees eager to try new products
Cofense discovered a phishing campaign that impersonates a private Anthropic beta invitation, using branded GoTo Webinar emails to lure enterprise employees into clicking, ultimately stealing Google and Microsoft login credentials. The attack uses URL shorteners and two Cloudflare CAPTCHA pages to block security scans; the fake Google page collects only usernames, while the fake Microsoft page collects both usernames and passwords. Researchers recommend enabling phishing-resistant MFA such as passkeys, and watching for subtle spelling flaws such as the sender "Austin from nthropic".