Phishing posing as Anthropic private preview steals Google and Microsoft logins

Cofense uncovered a phishing campaign that sends fake invitations to an invite-only Anthropic preview using GoTo Webinar branding. After two CAPTCHA gates, victims land on spoofed Google and Microsoft login pages built to steal corporate credentials.

• Fake emails mimic an Anthropic private session invite with GoTo Webinar branding
• Two Cloudflare CAPTCHA pages block scanners, VPNs and Tor while letting victims through
• Spoofed Microsoft domain is office[.]com-access-sharepoint[.]com, Google's is goo[.]gle-access-eventregister[.]icu
• Google page captures only usernames, Microsoft page collects both usernames and passwords