Google Calendar scam puts strange events into people’s schedule to trick them into being attacked
Phantom invitations are secretly being planted by cyber criminals
Your support helps us to tell the story
This election is still a dead heat, according to most polls. In a fight with such wafer-thin margins, we need reporters on the ground talking to the people Trump and Harris are courting. Your support allows us to keep sending journalists to the story.
The Independent is trusted by 27 million Americans from across the entire political spectrum every month. Unlike many other quality news outlets, we choose not to lock you out of our reporting and analysis with paywalls. But quality journalism must still be paid for.
Help us keep bring these critical stories to light. Your support makes all the difference.
Strange invitations are showing up in people's calendars as part of a dangerous scam, cyber security experts have warned.
The unwelcome events are actually ways of tricking people into cyber attacks that could see their data or money stolen.
Criminals are carrying out the exploit by inviting people to events through Google Calendar, which places that event into their schedule. That then serves as a link out to a URL – where a variety of different cyber threats might be lurking for anyone who clicks.
Many people are used to being suspicious of emails that they might receive from unknown senders and with strange links. But such messages placed inside their Google Calendar might appear more innocent, especially because it might not be immediately obvious where it has actually come from.
The invitations might appear with titles such as "You've received a cash reward," or "There's a money transfer in your name," according to Kaspersky Lab researchers who first reported their findings in Wired.
Anyone intrigued enough to click through will find that is not true at all and that the invitations are really just ways of slipping in the questionable links.
It is possible to ban people from adding invitations to your Google Calendar, which stops the scammers getting through at all.
Doing so is relatively simple. Open up the site on a PC, head to the settings and click on "event settings", where an option for "automatically add invitations" should show.
Switching that to "No, only show invitations to which I've responded" will stop people being able to add you to unwelcome events. It is also worth turning off the "show declined events" option, which will mean that any you do turn down will disappear rather than hang around.
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments