Cybersecurity threats evolve through calendar phishing and device code abuse

Cybersecurity experts are warning of evolving phishing tactics designed to bypass traditional security awareness. One growing method involves calendar phishing, where attackers send malicious invitations that automatically populate in services like Google Calendar. Because these entries appear alongside legitimate appointments, users are more likely to trust them and click on links to counterfeit login pages or fraudulent phone numbers. Some scammers even use legitimate platforms like Zoom to increase the perceived authenticity of the invitations.

Additionally, threat actors are increasingly abusing device code authentication. This technique involves tricking users into entering temporary access codes on fraudulent pages that mimic trusted brands such as Microsoft, Syncfusion, or Mimecast. Once a victim completes the sign-in process, they may unknowingly authorize a session for the attacker, granting them access to the account and its associated resources. Security professionals recommend disabling automatic calendar acceptance and maintaining high skepticism toward all unsolicited authentication requests.