SECURITY NOTICE: Calendar Phishing - A New Way Hackers Try to Trick You

What Is Calendar Phishing? 

Phishing isn’t just about emails anymore. Hackers have found a new way to reach you—through your calendar. This scam, called calendar phishing or ICS phishing, uses unsolicited or malicious calendar invites to sneak in dangerous links or attachments. Because these invites look normal and often show up automatically, they’re easy to fall for. 


Calendar phishing happens when attackers send fake meeting invites or .ics files that get added to your calendar. Many platforms, like Google Calendar and Microsoft 365, automatically add events without asking you first. That makes these scams look legitimate and hard to spot. 

 

How Hackers Do It 

  • They send an email with a calendar invite or .ics file. 
  • Your calendar adds the event automatically. 
  • The invite includes a fake meeting link or malicious attachment (like an HTML file or a PDF with a QR code). 
  • Common tricks include: 
  • “Account Suspended” alerts in Outlook invites. 
  • Google Calendar events claiming you’ve won a prize. 
  • QR codes that lead to fake login pages. 

 

Why It’s Dangerous 

Clicking these links or opening attachments can: 

  • Steal your login details. 
  • Install malware on your computer. 
  • Give hackers access to company accounts. Even declining the invite can confirm your email is active, making you a bigger target. 

 

How to Stay Safe 

  1. Check the sender: Don’t trust invites from people you don’t know. 
  2. Turn off auto-add: 
  3. In Google Calendar: Go to Settings → Event Settings → choose “No, only show invitations to which I have responded.” 
  4. In Microsoft 365: Ask IT to disable automatic processing. 
  5. Review your calendar settings: Make sure events need your approval. 
  6. Don’t click unknown links or attachments: Treat calendar invites like suspicious emails. 
  7. Use security tools: Some email security systems can remove bad calendar events. 
  8. Enable MFA (Multi-Factor Authentication): Adds extra protection for your accounts. 
  9. Stay informed: Learn the signs of calendar phishing and share tips with your team. 

 


Bottom Line: If an invite looks odd or urgent, pause before you click. A few quick checks can keep your calendar—and your company—safe. 

November 4, 2025
Why Cybersecurity Hygiene Matters for SMBs
October 28, 2025
Why Leading with AI Matters for Small and Medium-Sized Businesses
October 10, 2025
Fake CAPTCHA Sites Hijack Clipboard to Install Malware
October 10, 2025
Understanding Business Email Compromise (BEC)
By Kordel Eberly August 17, 2025
Welcome to the Cyber Cold War
fish hook
By Eberly Systems September 20, 2024
We're all in the same boat trying to avoid cybercrime! Here's our top ways to identify a potential phishing attempt.
By Eberly Systems September 10, 2024
Focus on integrating with new team members and new customers
By Eberly Systems July 9, 2024
Keeping you abreast of security news
By Eberly Systems May 2, 2024
West Lawn, PA, May 2, 2024 — Eberly Systems , the West Lawn-based managed IT services and managed voice provider, today announces its acquisition of the Lebanon-based LYLAB Technology Solutions. Eberly Systems seeks to further a movement of people who are motivated and equipped to make a difference in their world through their daily work. They believe in building lasting partnerships based on trust and transparency while delivering industry-leading solutions to support and protect critical business assets. Driven by the principles of people, excellence, integrity, and stewardship, the team prides itself on partnering with companies to securely, reliably, and efficiently grow their businesses. “We cannot be more excited to join forces with the LYLAB team,” comments Kordel Eberly, Eberly Systems President & Founder. “ The integration of LYLAB Technology Solutions into Eberly Systems solidifies our commitment to providing small businesses with unparalleled service and support. We’re proud of this new opportunity to carefully design and manage the IT infrastructure and systems of even more local businesses and communities.” The acquisition solidifies the Eberly Systems commitment to supporting businesses in Lebanon County. Merging the two teams together as one entity offers the collective team the benefit of enhancing capabilities, refining processes, and extending reach to better serve the evolving needs of small businesses in the surrounding area. Future plans include expanding their presence into Lancaster County.
computer help with IT support
By Eberly Systems January 16, 2024
A trusted MSP can be your invaluable strategic partner.