Phishing scam detected in Google Calendar, says cybersecurity expert

  • TECH
  • Thursday, 20 Jun 2019

The criminals reportedly abuse a specific feature of the calendar that adds events and invitations automatically.

If you see an unfamiliar notification on your Google Calendar, don’t be too quick to click on the link.

You could fall victim to a new form of phishing attack, warns cybersecurity expert Kaspersky Lab.

Cybercriminals are reportedly luring unsuspecting Google users to click on links sent to them via the Calendar feature, exposing them to a variety of cyber threats. Kaspersky notes that it observed attacks targeting victims throughout May.

The criminals reportedly abuse a specific feature of the calendar that adds events and invitations automatically. 

Users supposedly received pop-up Calendar notifications, and the report shows that in some cases, the victims are redirected to a website that offers money in exchange for the users to complete an online questionnaire. In order to receive the prize, the victims are asked to enter their credit card and other personal details.

However, not only do these victims not receive the prize money, their details are possibly sent to scammers who could steal the victims’ money or identity, says the report.

“The ‘calendar scam’ is a very effective scheme, as most people have become used to receiving spam messages from emails or messenger apps,” said Maria Vergelis, security researcher at Kaspersky in a statement.

“But this may not be the case when it comes to the Calendar app, which has a main purpose to organise information rather than transfer it.

"So far, the sample we’ve seen contains text displaying an obviously weird offer, but as it happens, every simple scheme becomes more elaborate and trickier with time. The good news is that it’s fairly easy to avoid such a scam,” she said.

Vergelis added that the feature that enables it can be easily turned off in the Calendar settings.

To do so, open Google Calendar, head to Settings and choose Event Settings. Select "No" for the “automatically add invitations” option and select “No, only show invitations to which I’ve responded”.

Also make sure that the “Show declined events” under the View Options section is not selected.  

Google Calendar was down for a few hours globally yesterday with no explanation from the company as to the cause or reason.

Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 1
Cxense type: free
User access status: 3
Subscribe now to our Premium Plan for an ad-free and unlimited reading experience!

Next In Tech News

The case of the vanishing deposit: US woman defrauded in catfishing check scam that reveals vulnerability of bank accounts
Date turns violent when man is stabbed by woman he met on dating app, US cops say
Virtual climate reality: Can ‘digital twins’ help protect us from disasters?
Amid high US inflation, online insurance offers mislead elderly
Twitter under Elon Musk? Most of the plans are a mystery
Australian man arrested in alleged scam of Optus hack victims
This man is one of China’s most outspoken food influencers with millions of fans – he exposes synthetic products like fake steak and milk tea without dairy
Facebook asks users for more help improving its�algorithms
Stepfather sexually assaults girl in front of students in online class, US cops say
Some 16,000 traffic charges ‘dismissed’ – by mistake – after North Carolina courts computer problem

Others Also Read