Laufender Phishing-Angriff missbraucht Google Kalender, um Spam-Filter zu umgehen

Teilen:

An ongoing phishing scam is abusing Google Calendar invites and Google Drawings pages to steal credentials while bypassing spam filters.

According to Check Point, which has been monitoring the phishing attack, the threat actors have targeted 300 brands with over 4,000 emails sent in four weeks.

Check Point told BleepingComputer that the attacks targeted a broad range of companies, including educational institutions, healthcare services, building companies, and banks.

The attack starts with the threat actors using Google Calendar to send meeting invites that look pretty innocuous, especially if you recognize some of the other guests.

Embedded in these invites, as shown below, is a link that leads to Google Forms or Google Drawings that prompt the user to click another link, typically disguised as a reCaptcha or support button.

Example Google Calender invite phishing email
Example Google Calender invite phishing email
Source: Check Point

Email Researchers at Check Point told BleepingComputer that by utilizing the Google Calendar services to initiate the phishing invites, they bypass spam filters as they are coming from a legitimate Google service.

“The attackers utilized Google Calendar services, making the headers appear completely legitimate and indistinguishable from invitations sent by any typical Google Calendar user,” Check Point told BleepingComputer.

The researchers shared an image of the email headers, showing they passed DKIM, SPF, and DMARC email security checks, allowing the phishing invite to land in the targets’ inboxes.

Mail headers sent in Google Calendar spam
Mail headers sent in Google Calendar spam
Source: Check Point

To double the number of phishing emails sent to the target, the threat actors can also cancel the Google Calendar event and include a message that will be sent to attendees.

This message can also include a link, such as a Google Drawings link, to further drive targets to phishing pages.

Using Google Drawings as part of Google Calendar phishing
Using Google Drawings as part of Google Calendar phishing
Source: Check Point

Google Calendar phishing is not new, with Google previously rolling out protections allowing users to block these types of invites more easily.

However, if a Google Workspace administrator does not enable these protections, you will continue to have invites automatically added to your calendars.

Check Point recommends that users be wary of all meeting invites received, and if they prompt you to click on a link, ignore them unless you trust or confirm the sender.

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
1:57 pm, Feb. 8, 2025
Wetter-Symbol 6°C
L: 5° | H: 6°
overcast clouds
Luftfeuchtigkeit: 91 %
Druck: 1018 mb
Wind: 10 mph ENE
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 100%
Regen Chance: 0%
Sichtbarkeit: 3 km
Sonnenaufgang: 7:27 am
Sonnenuntergang: 5:02 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 9:00 pm
Wetter-Symbol
5° | 6°°C 0 mm 0% 4 mph 91 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
Wetter-Symbol
3° | 5°°C 1 mm 100% 10 mph 97 % 1030 mb 0 mm/h
Mo. Feb. 10 9:00 pm
Wetter-Symbol
3° | 4°°C 1 mm 100% 11 mph 96 % 1029 mb 1.38 mm/h
Di. Feb. 11 9:00 pm
Wetter-Symbol
3° | 4°°C 0.38 mm 38% 8 mph 97 % 1020 mb 0 mm/h
Mi. Feb. 12 9:00 pm
Wetter-Symbol
4° | 6°°C 0 mm 0% 5 mph 92 % 1023 mb 0 mm/h
Today 3:00 pm
Wetter-Symbol
6° | 6°°C 0 mm 0% 4 mph 91 % 1018 mb 0 mm/h
Today 6:00 pm
Wetter-Symbol
5° | 6°°C 0 mm 0% 4 mph 88 % 1019 mb 0 mm/h
Today 9:00 pm
Wetter-Symbol
4° | 5°°C 0 mm 0% 3 mph 84 % 1021 mb 0 mm/h
Tomorrow 12:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 3 mph 84 % 1024 mb 0 mm/h
Tomorrow 3:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 4 mph 87 % 1025 mb 0 mm/h
Tomorrow 6:00 am
Wetter-Symbol
4° | 4°°C 0.29 mm 29% 7 mph 94 % 1026 mb 0 mm/h
Tomorrow 9:00 am
Wetter-Symbol
4° | 4°°C 0.99 mm 99% 7 mph 97 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
Wetter-Symbol
4° | 4°°C 1 mm 100% 10 mph 96 % 1028 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€93,254.95
-2.45%
Ethereum(ETH)
€2,543.45
-5.37%
Fesseln(USDT)
€0.97
-0.03%
XRP(XRP)
€2.34
-1.14%
Solana(SOL)
€189.50
-2.39%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.242556
-2.88%
Shiba Inu(SHIB)
€0.000015
0.88%
Pepe(PEPE)
€0.000009
-3.06%
Nach oben scrollen