Fake calendar invites hit thousands of businesses in Microsoft credential phishing campaign

(Image credit: Getty Images // Muhammad Farhad)

Phishing campaigns are abusing calendar invites and meeting requests to steal Microsoft 365 credentials

Attackers hide malicious links in .ics files, fake meeting details, QR codes, and invite pages

Researchers observed hundreds of thousands of phishing emails targeting over 40,000 organizations

If you get a calendar invite in your inbox be wary - it might be a carefully created phishing lure, designed to have you hand over Microsoft 365 or other login credentials.