A scam using Google Calendar invitations as bait has been active since mid-August 2026.
Messages pose as notices about missed calls, document requests or payments.
A real-time intermediary sits in front of Google's genuine sign-in page, allowing attackers to capture passwords and second-factor codes as victims enter them.
Material Security and Cloudflare worked to disrupt the infrastructure: more than 68,000 message…
https://en.hacks.gr/apateones-klevoyn-stoicheia-syndesis-google-meso-proskliseon-sto-calendar/