Google Calendar phishing campaign hijacks sessions and bypasses MFA
PHISHINGredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A phishing campaign abused Google Calendar invites, trusted redirects and fake login pages to hijack corporate Google sessions and bypass MFA. Material Security describes how its Operation CloudFire tracked the attacks, blocked malicious messages and helped take down nearly 900 domains used by the attackers.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Treat unexpected Google Calendar invitations and login prompts with suspicion, as they were the lure in this campaign.
- Review the Material Security write-up for details on how the campaign was tracked and blocked.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer