The annoying scam that may be hiding in your work calendar
Scammers are using calendar invitations to lure workers to phishing sites and fake calls. Here's why the attacks can be so convincing.
Calendar phishing scams are becoming increasingly common, targeting employees in client-facing roles like sales, recruiting, and consulting. A recent surge in these attacks has been observed, with calendar-related incidents more than doubling in August compared to July, and nearly quadrupling in mid-year compared to May. Cybersecurity experts warn that AI is making these scams more convincing, potentially allowing attackers to exploit AI agents to accept fraudulent invitations on workers' behalf.
Victims might receive a bogus calendar invite from a colleague, with the meeting link leading to a phishing site or prompting the disclosure of sensitive information. One victim received an invitation from his own email address, warning him of a court summons, after his account was hacked. Experts suggest using passkeys, which are specific to a particular website, as a more secure alternative to traditional login methods.
Written by urgent.news from Business Insider's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
