Google Calendar scam puts strange events into people’s schedule to trick them into being attacked

Phantom invitations are secretly being planted by cyber criminals

Andrew Griffin
Tuesday 18 June 2019 14:53 BST
Comments
This picture taken on November 5, 2018 shows a woman passing a booth of Google at the first China International Import Expo (CIIE) in Shanghai
This picture taken on November 5, 2018 shows a woman passing a booth of Google at the first China International Import Expo (CIIE) in Shanghai (JOHANNES EISELE/AFP/Getty Images)

Your support helps us to tell the story

This election is still a dead heat, according to most polls. In a fight with such wafer-thin margins, we need reporters on the ground talking to the people Trump and Harris are courting. Your support allows us to keep sending journalists to the story.

The Independent is trusted by 27 million Americans from across the entire political spectrum every month. Unlike many other quality news outlets, we choose not to lock you out of our reporting and analysis with paywalls. But quality journalism must still be paid for.

Help us keep bring these critical stories to light. Your support makes all the difference.

Strange invitations are showing up in people's calendars as part of a dangerous scam, cyber security experts have warned.

The unwelcome events are actually ways of tricking people into cyber attacks that could see their data or money stolen.

Criminals are carrying out the exploit by inviting people to events through Google Calendar, which places that event into their schedule. That then serves as a link out to a URL – where a variety of different cyber threats might be lurking for anyone who clicks.

Many people are used to being suspicious of emails that they might receive from unknown senders and with strange links. But such messages placed inside their Google Calendar might appear more innocent, especially because it might not be immediately obvious where it has actually come from.

The invitations might appear with titles such as "You've received a cash reward," or "There's a money transfer in your name," according to Kaspersky Lab researchers who first reported their findings in Wired.

Anyone intrigued enough to click through will find that is not true at all and that the invitations are really just ways of slipping in the questionable links.

It is possible to ban people from adding invitations to your Google Calendar, which stops the scammers getting through at all.

Doing so is relatively simple. Open up the site on a PC, head to the settings and click on "event settings", where an option for "automatically add invitations" should show.

Switching that to "No, only show invitations to which I've responded" will stop people being able to add you to unwelcome events. It is also worth turning off the "show declined events" option, which will mean that any you do turn down will disappear rather than hang around.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in