The annoying scam that may be hiding in your work calendar
Scammers send fake calendar invites to work email accounts to steal passwords and sensitive information. A security firm reported that these attacks rose more than tenfold from July to August, and criminals now use AI to make them convincing.
How it works
The contact arrives as a meeting invite in your work calendar, often from an unknown sender or a spoofed colleague. The invite looks routine, with a meeting title, time, and a link to join or view details. Clicking the link or opening the invite sends you to a fake login page or prompts you to share credentials or other sensitive data.
Red flags to watch for
- Meeting invite from someone you do not recognize
- Invite pushes you to click a link to join or confirm
- Login prompt appears after you open a calendar invite
- Request for password, login code, or account details
- Urgent or unexpected meeting with no agenda or context
- Invite arrives from a colleague but seems out of character
What to do
Do not click links in unexpected calendar invites, and do not enter your password on any page the invite sends you to. Confirm the meeting with the sender through a separate channel, such as a phone call or a message you start yourself. Report suspicious invites to your IT or security team so they can block the sender and check for compromised accounts.
If this reached you
Source: Business Insider . Scam Sentinel summarizes this news report in plain language; it is a decision aid, not a guarantee.