A tricky phishing attack is targeting Denison using Google Calendar invitations. Attackers are sending fake calendar invites, taking advantage of calendar invitation settings designed to make it easy to schedule meetings.
This phishing technique sends a Google Calendar invitation directly to your calendar, which bypasses email spam filters. By default, Google automatically adds calendar invites directly to your calendar. The attackers’ invitations appear genuine alongside your real events, classes, and meetings.
What do I do if I get a suspicious Google Calendar invite?
- Select “Report as spam” in Google Calendar to report the event.
- Do not click “Accept” or “Decline.” This encourages the attacker to try again.
- Do not click links, call phone numbers, or reply to a suspicious event.
Learn more about how to detect and stop these attacks here.
