Google Calendar is being targeted by hackers who are spoofing email headers to access users' private information. The scam could affect 500 million users, with sensitive personal and business information potentially stolen - but you can stay safe by changing a single setting.
How the Google Calendar Phishing Attack Works
The Google Calendar phishing campaign was first discovered by cybersecurity experts at Check Point Software.
Attackers send invitations that look like regular Google Calendar invites. To make the invitations look credible, they modify the email headers of the invitations to make them appear to be sent by a legitimate company or someone the target knows. Most of the invitations look exactly like regular Google Calendar invites, while others use a custom format.
The link in the invitation takes the target to a phishing page where the victim is asked to complete a fake authentication process, share personally identifiable information (PII) or business information, and in some cases, even share payment details. The stolen information is used for financial scams, credit card fraud, identity theft, and other fraudulent activities.
After realizing that Google's email scanning was flagging these malicious calendar invitations, the attackers modified their campaign and began using Google Forms and Google Drawings. Sending calendar invitation files (.ics) with links to Google Forms or Google Drawings allowed them to bypass Google's security scans.
After the user opens the Google form, they are asked to click on another link that leads to a phishing page, disguised as a reCAPTCHA or a fake support page.
Change this Google setting to protect yourself!
Google recommends changing your “known senders” settings in Google Calendar to protect yourself from this phishing and spoofing attack.
Changing this setting will filter all invitations added to your calendar to only include invitations from people in the same company you work for (with the same domain), people in your contacts list, or people you've interacted with before. You'll also get a warning when you receive an invitation from someone who isn't on your list or who you've never interacted with before.
As with all of these attacks, avoid clicking on clicks if you don't know the sender. Even if the sender is someone you know, it's best to contact the person to double-check first, especially if the invite is for an unexpected event or meeting.
How to stop receiving spam on Google Calendar, Do you want to get rid of "spam" invitations that constantly appear on Google Calendar? Then please refer to how to block spam
All Google services drain your battery and violate your privacy. Fortunately, you can limit the amount of data they share with Google and the amount of battery they use by uninstalling, disabling or reconfiguring them.
Struggling with Microsoft Teams Background Error Transparency? Discover proven step-by-step fixes for blurry, glitchy virtual backgrounds. Restore perfect transparency in Teams meetings effortlessly. Updated with the latest solutions.
Struggling with Microsoft Teams "Đăng nhập" login error? Discover step-by-step fixes for smooth sign-in. Clear cache, update app, and more – no tech skills needed! Works on Windows, Mac, and web.
Tired of Microsoft Teams Web Error 503 Service Unavailable blocking your meetings? Discover quick, step-by-step fixes to resolve the 503 error fast – no tech skills needed! Clear cache, check status, and get back to collaborating seamlessly.
Stuck with Microsoft Teams Update Error 0x80070002? Discover proven troubleshooting steps to resolve this frustrating issue quickly and get your Teams app updated seamlessly for uninterrupted collaboration.
Tired of Microsoft Teams Error AADSTS50020 blocking your sign-in? Discover step-by-step fixes for user account conflicts, backed by the latest Azure AD solutions. Get back to work fast!
Tired of Microsoft Teams microphone error with no sound? Discover quick, step-by-step fixes for Teams mic not working on Windows, Mac, and more. Restore crystal-clear audio in minutes!
Tired of the Microsoft Teams "Task Management" Error disrupting your workflow? Discover proven fixes like clearing cache, updating Teams, and troubleshooting permissions to get back to seamless collaboration in minutes. Updated with the latest solutions.
Frustrated by the Microsoft Teams 'How to Teams' Help Error? Discover proven, step-by-step solutions to fix it quickly and restore smooth help access. Latest 2026 updates included for seamless teamwork.
Struggling with Microsoft Teams "Room Error" Syncing? This ultimate guide provides step-by-step fixes for Microsoft Teams Room Error Syncing issues, ensuring seamless meetings and quick resolutions. Updated with the latest tips.
Master troubleshooting Microsoft Teams Workflows Power Automate issues with step-by-step fixes for common errors. Get your automations running smoothly – no more frustration! Proven solutions for triggers, permissions, and more.
Struggling with Microsoft Teams "Restart Error" in 2026? Discover proven, step-by-step fixes to resolve the endless restart loop quickly. Clear cache, reset app, and more for seamless collaboration. Get back online fast!
Master how to create breakout rooms in Microsoft Teams before a meeting with this easy guide. Pre-assign participants, boost collaboration, and elevate your virtual sessions effortlessly.
Tired of Microsoft Teams sidebar missing? Get instant fixes for layout errors. Step-by-step guide with latest tips to restore your Teams sidebar fast and frustration-free.
Struggling with Microsoft Teams Download Error on MacBook? Get step-by-step fixes for smooth installation on the latest macOS. Solve download failed issues quickly and easily.
Tired of Microsoft Teams Error J blocking your accounts? Get instant fixes for Error J in Teams with step-by-step guides, cache clears, and account resets. Regain access fast—no tech skills needed!
