Free ChatGPT Pro Invite? It’s a Device-Code Trap for Your Work Account
Push Security says fake OpenAI, SpaceX and Anthropic event pages send Microsoft logins to Kali365 device-code phishing and Google logins to a VoidProxy reverse proxy, beating MFA either way.
Free ChatGPT Pro, three months of Grok Heavy, maybe a “SpaceX share”: that’s the pitch on fake event registration pages built to steal corporate Microsoft and Google accounts. Push Security says the pages impersonate OpenAI, SpaceX and Anthropic events and hand victims to two different phishing-as-a-service platforms, one for each sign-in button, BleepingComputer reports. Push says it blocked visits to the pages in late October.
For defenders
Delivery: initial distribution is unclear, but victims reach the pages through trusted redirectors, including Google and Zapier URL shorteners (T1566.002 (Phishing: Spearphishing Link)). Earlier waves used GoTo Webinar’s mail system and genuine Zoom event pages. A Cloudflare CAPTCHA sits in front to keep scanners out. Push tracks two kits, ZoomMock and MSDRoot, and thinks one actor runs both based on shared infrastructure and targeting.
“Continue with Microsoft”: the page asks the Kali365 service for a Microsoft device code and tells the victim to enter it on Microsoft’s real device-login page. Approving it gives the attacker tokens for the victim’s Entra account and any SSO apps behind it, with no password typed into the phishing site (T1528 (Steal Application Access Token)). The victim is then bounced to a VoidProxy Microsoft login page that grabs the password and session cookie too.
“Continue with Google”: a pop-up loads a VoidProxy reverse proxy in front of Google’s real sign-in, capturing the password, MFA response and session cookie (T1557 (Adversary-in-the-Middle), T1539 (Steal Web Session Cookie)). Either route gets past code- and push-based MFA. Lures seen: an OpenAI “ChatGPT for Social & Digital Marketing Teams” event, a private SpaceX event on November 12, and an Anthropic event at AWS re:Invent 2026 (already taken down). Details: Push Security’s analysis.
Defend: block or restrict the device code flow with Conditional Access wherever nobody needs it, alert on device-code sign-ins, and move high-value users to FIDO2 keys or passkeys.
What it means for you
If an invitation offers free AI subscriptions or startup shares for signing up with your work account, it’s bait. The nasty part on the Microsoft side: you may type a code into a genuine Microsoft page, and that’s exactly what hands your account over. A real event will never need you to enter a sign-in code that a website gave you.
Do this now
- Never enter a Microsoft “device code” that a website, email or chat message gave you, unless you started the sign-in yourself on a TV, printer or similar device.
- Be suspicious of event invites that require a work-account login to claim a prize.
- If you clicked and signed in, tell IT right away so they can revoke your sessions and tokens; changing your password alone doesn’t kick the attacker out.
- Protect work and personal accounts with a passkey or a hardware security key, which these proxy pages can’t relay.