{"id":57883,"date":"2024-12-18T00:58:08","date_gmt":"2024-12-18T00:58:08","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/phishers-cast-wide-net-with-spoofed-google-calendar-invites\/"},"modified":"2024-12-18T00:58:08","modified_gmt":"2024-12-18T00:58:08","slug":"phishers-cast-wide-net-with-spoofed-google-calendar-invites","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/phishers-cast-wide-net-with-spoofed-google-calendar-invites\/","title":{"rendered":"Phishers cast wide net with spoofed Google Calendar invites"},"content":{"rendered":"

Criminals are spoofing Google Calendar emails in a financially motivated phishing expedition that has already affected about 300 organizations with more than 4,000 emails sent over four weeks, according to Check Point researchers.<\/p>\n

The crims modify sender email headers so the messages appear to be legitimate Google Calendar invites sent from someone the victim knows. It’s a good lure, from the fraudsters’ perspective, because more than 500 million people use Google Calendar.<\/p>\n

The phishing emails usually include a [.]ics calendar file with a link to Google Forms or Google Drawings. Once the recipient clicks on the link, they are prompted to click on another one, which Check Point notes is typically disguised as a reCAPTCHA or support button.<\/p>\n