Security News iCloud Calendar abused to send phishing emails from Apple’s servers

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/security/icloud-calendar-abused-to-send-phishing-emails-from-apples-servers/

iCloud Calendar invites are being abused to send callback phishing emails disguised as purchase notifications directly from Apple's email servers, making them more likely to bypass spam filters to land in targets' inboxes.

Earlier this month, a reader shared an email with BleepingComputer that claimed to be a payment receipt for $599 charged against the recipient's PayPal account. This email included a phone number if the recipient wanted to discuss the payment or make changes to it.

As a general rule, if you receive an unexpected Calendar invite with a strange message within it, it should be treated with caution.

BleepingComputer contacted Apple about this scam, but did not receive a response to our email.

iCloud Calendar abused to send phishing emails from Apple’s servers

iCloud Calendar invites are being abused to send callback phishing emails disguised as purchase notifications directly from Apple's email servers, making them more likely to bypass spam filters to land in targets' inboxes.

www.bleepingcomputer.com