Google Calendar scam puts strange events into people’s schedule to trick them into being attacked
Phantom invitations are secretly being planted by cyber criminals
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.Strange invitations are showing up in people's calendars as part of a dangerous scam, cyber security experts have warned.
The unwelcome events are actually ways of tricking people into cyber attacks that could see their data or money stolen.
Criminals are carrying out the exploit by inviting people to events through Google Calendar, which places that event into their schedule. That then serves as a link out to a URL – where a variety of different cyber threats might be lurking for anyone who clicks.
Many people are used to being suspicious of emails that they might receive from unknown senders and with strange links. But such messages placed inside their Google Calendar might appear more innocent, especially because it might not be immediately obvious where it has actually come from.
The invitations might appear with titles such as "You've received a cash reward," or "There's a money transfer in your name," according to Kaspersky Lab researchers who first reported their findings in Wired.
Anyone intrigued enough to click through will find that is not true at all and that the invitations are really just ways of slipping in the questionable links.
It is possible to ban people from adding invitations to your Google Calendar, which stops the scammers getting through at all.
Doing so is relatively simple. Open up the site on a PC, head to the settings and click on "event settings", where an option for "automatically add invitations" should show.
Switching that to "No, only show invitations to which I've responded" will stop people being able to add you to unwelcome events. It is also worth turning off the "show declined events" option, which will mean that any you do turn down will disappear rather than hang around.
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments