Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
2 clusters · 7 sources · 4 days · First seen · Last updated
Evolving phishing and fraudulent schemes
Overview
Cybersecurity experts have identified evolving phishing tactics designed to bypass traditional security measures. One method involves “calendar phishing,” where malicious invitations are sent to services like Google Calendar to appear alongside legitimate appointments, tricking users into clicking fraudulent links. Additionally, threat actors are abusing device code authentication by using fake login pages for brands like Microsoft to trick users into authorizing unauthorized sessions.
Further fraudulent activities have been identified involving the use of Gmail accounts. In Latin America, researchers found an investment scam network utilizing sponsored Gmail advertisements, cloned media sites, and AI-driven voice cloning to impersonate financial firms. Meanwhile, in Puerto Rico, authorities issued alerts regarding phishing emails sent from Gmail addresses that impersonate government officials to solicit personal information under the guise of housing vouchers or relocation assistance.
Entities
Google Calendar · Gmail · Cofense Phishing Defense Center · Public Housing Administration · Department of Housing
Timeline
-
[TECHNOLOGY] 3 sourcesCybersecurity alerts issued regarding Gmail-based fraud
Authorities and cybersecurity researchers are warning of diverse fraud schemes using Gmail, including AI-powered investment scams and phishing attempts targeting housing assistance programs.
-
[TECHNOLOGY] 4 sourcesCybersecurity threats evolve through calendar phishing and device code abuse
Cybercriminals are using sophisticated phishing methods, including malicious calendar invitations and the abuse of device code authentication, to steal user credentials and hijack accounts.
Sources
cofense.com · cybernoz.com · cyren.com · eluniversaldigital.net · radioisla1320.com · rocketnews.com · tecnogus.com.co