'You have a meeting': the calendar phishing scam growing exponentially
Appointment or renewal reminder appears in victims’ calendar to lure them into logging in to fake Google, Microsoft or PayPal page
TL;DR
- Calendar phishing scams are growing exponentially, using fake meeting or renewal reminders.
- Invitations can automatically add to calendars without user acceptance, bypassing spam filters.
- Scammers aim to trick users into clicking links to fake login pages for services like Google, Microsoft, or PayPal.
- Some scammers use legitimate platforms like Zoom to send invitations, making them harder to detect.
- Users are advised to be suspicious of all invitations, even those appearing to be internal.
- Recommendations include disabling automatic calendar invitation acceptance and opting to accept only from known senders.
- Do not click 'decline' on suspicious invites; instead, delete or report them as spam/junk.