Stockcam/Getty Images
Have a meeting on your calendar you don’t recognize? It might not be because you’re a bad employee who can’t keep track of your responsibilities—a scammer may have booked some time in hopes of acquiring your sensitive information.
Incidents of what’s known as ICS phishing—because calendar files are .ics—were up ~33,000% between May and September, according to the cybersecurity firm Sublime (not to be confused with the band behind the 1990s hit “What I Got”). Calendar invites can sneak malicious links past your spam filter and don’t require you to open an attachment, making them attractive to scammers. Professionals who often meet with strangers, like salespeople and recruiters, are common targets.
The scam mostly uses three methods, meaning a link inside the meeting on your calendar will either:Take you to a form asking for login credentials.
Serve as a prompt to download malware onto your laptop.
Or be to a meeting with a scammer posing as someone you don’t know but have reason to trust, like an employee at another company or a potential client.
Talk to your agent: One way these invites are showing up on calendars is when AI agents accept invitations on the worker’s behalf, per Sublime.
It’s also a human problem: Consumer Affairs suggests checking your settings to make sure you’re not automatically adding every invite to your calendar willy-nilly.—DL
No comments:
Post a Comment