Gmail Calendar Users Targeted in New Phishing Scam

Users of Google’s Calendar app are being warned about a scam that takes advantage of the popularity of the free service and its ability to schedule meetings easily. The latest warning from researchers at Kaspersky indicates the bad guys are using unsolicited Google Calendar notifications to trick user into clicking phishing links.

This is how it works: Scammers send a Google user a calendar invite complete with meeting topic and location information. Inside the details of the appointment lies a malicious link that looks like it’s pointing you back to meet.google.com for more details. Once clicked, it’s back to the usual tactics of trying to infect the user with malware and so on. It is also hidden within a meeting invite and uses a seemingly valid URL for more information which can be confusing.

We continue to caution users about their interaction with email and the web. Now it’s important to add Calendar invites to the list. If you need any help, please feel free to contact the CapIT Help Desk at: helpdesk@capital.edu, or by calling: 614-236-6508.