If you've received a mysterious calendar invite from an address like firstname.lastname@example.org for an event that has you scratching your head, you may have encountered "calendar phishing." These occur when a perpetrator sends a legitimate calendar invite from a random account trying to get you to click on a bogus URL, such as in the example below.
If you do encounter calendar phishing, let us know. And besides not clicking on the links in the invitation, you may also consider disabling auto acceptance of calendar invites. Here's how to adjust your Calendar settings:
- From your Google Calendar, click the settings Gear Icon, then on Event Settings.
- For the Automatically add invitations option, click on the dropdown menu and select No, only show invitations to which I've responded.
- Below this, in the View Options section, make sure Show declined events is NOT checked, unless you specifically wish to view these.
- Any changes will be saved automatically.
From: Google Calendar
Date: Tue, Mar 20, 2018 at 12:25 PM
Subject: Notification: Flight to Detroit (DL 4600) @ Tue Mar 20, 2018 12:35pm - 2:41pm (EDT) (email@example.com)
To: Josiah Carberry <firstname.lastname@example.org>
Flight to Detroit (DL 4600)
When: Tue Mar 20, 2018 12:35pm – 2:41pm Eastern Time
Where: Providence PVD (map)
Going? Yes - Maybe - No more options »
Invitation from Google Calendar
To stop receiving these emails, please log in to https://www.google.com/calendar/ and change your notification settings for this calendar.
Forwarding this invitation could allow any recipient to modify your RSVP response. Learn More.