Scammers send calendar invites via email that automatically appear in apps like Google Calendar, even if the email is unopened or lands in spam
A new type of online scam has grown exponentially this year, according to security experts: calendar phishing.
It is also called ICS phishing since calendar files are .ics. Cybersecurity firm Sublime Security observed that such scams shot up 1,216% in August compared with July.
What is calendar phishing?
Scammers email calendar invites that automatically appear in apps like Google Calendar, even if the email is unopened or lands in spam.
Mixed in with legitimate events, such as dentist appointments or one-on-one meetings, these invites can make users think they have overlooked a genuine calendar entry.
Fraudsters use titles such as “New voicemail received,” “Payment receipt confirmation – $298.99,” or warnings regarding unusual PayPal activity.
The scam usually plays out in one of three ways. A calendar link may ask for your login credentials, trick you into downloading malware, or connect you with someone pretending to be a business associate or potential client.
Cybersecurity engineers note that users are only compromised if they click the link or call the number. They advise turning off auto-accept settings in your calendar apps to only allow invitations from known senders.
Additionally, never click “decline” on a suspicious invite, as this confirms your email address is live; instead, delete the event or report it as spam immediately.