Scammers are weaponizing digital calendars, sending fraudulent meeting invites directly to your schedule to bypass traditional spam filters and steal your credentials or deploy malware.

Scam watch report

Security firms report a massive spike in ICS phishing (named after .ics calendar files), where fraudsters book unauthorized meetings on your calendar. Because calendar invites blend seamlessly into your daily routine and often bypass email spam filters, professionals—especially those interacting with clients, recruiters, or the public—are prime targets. Even automated AI assistants managing your inbox are accidentally accepting these malicious invites on workers’ behalf.

How the scam works

• The Bait: A random, unrecognized meeting invite lands on your calendar, sometimes automatically accepted by your app or an AI assistant.
• The Deception: The invite appears legitimate, bypassing standard security barriers because it’s delivered via standard calendar protocols rather than a typical email link or attachment.
• The Trap: When you review the meeting details, clicking the link inside leads to one of three malicious outcomes:
  1. A fake login page designed to steal your credentials.
  2. A prompt that downloads malware onto your device.
  3. A live video/audio meeting with an imposter posing as a trusted client or business partner.

Red flags to watch for

• Unsolicited or unrecognized meetings: A calendar invite from an unknown sender or a meeting topic you never discussed or scheduled.
• Suspicious links in descriptions: Meeting notes containing external links directing you to log in to an unfamiliar portal or download a document.
• Automatic calendar additions: Settings that automatically drop every incoming invite straight into your main calendar without your manual review.

What to do if you spot a fake invite

1. Do not click or join: Never click links inside suspicious meeting descriptions or accept calls with unknown attendees.
2. Decline and report: Reject the invitation and delete/block the sender.
3. Update your settings: Adjust your calendar app settings to turn off automatic meeting additions, ensuring you manually review and approve every invite before it hits your schedule.

(A shout out to morningbrew.com)