12 June 2026 - 12:32
Category: User Error
A lovely meeting invite for malware
Attackers are bypassing email filters by sticking phishing links directly into calendar invites. Because why click links in emails when you can do it in a meeting?
Source: Health-ISAC
The Full Story
It turns out email security filters are no match for the sheer convenience of automated calendar invites. Some clever souls are targeting healthcare organizations by bypassing gateways entirely, attaching sneaky iCalendar files that drop malicious links straight into schedules. Since Outlook and Google Calendar happily process these invites automatically, employees are treated to high-trust traps on a silver platter. Staying safe requires us to actually scrutinize our agendas instead of blindly clicking every meeting link that magically materializes on our screens.