A new style of scam has been found that is trying to get users to share their Google calendar. Scammers are sending phishing emails inviting users to use a free calendar service that adds invitations and events to users’ calendars automatically. The spam email campaign targets mobile users that utilize the google calendar app. This new technique has evolved from the previous spam emails that were claiming that a CEO invited them to a meeting and to add the meeting to their calendars. This new campaign does not appear to be quite as advanced as previously found but will assuredly grow in complexity. Scammers use this stolen information to build profiles on users in an attempt to steal credentials, copy possible business information and even to perform identity theft. In a worst-case scenario. If an attacker knows the schedule of a user, then it is possible to perform physical attacks or even home invasions. While the latter two scenarios are extreme cases, the possibility is there.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased