iCloud Calendar invites are being misused to send callback phishing emails that seem like purchase notifications straight from Apple’s email servers. This increases the likelihood that the emails will get past spam filters and reach their intended recipients’ inboxes.
A reader sent BleepingComputer an email earlier this month claiming to be a payment receipt for $599 that had been charged to the recipient’s PayPal account. If the recipient wanted to talk about the payment or make modifications, this email offered a phone number.
Good day, client Payment of $599.00 has been made to your PayPal account. Please check the email to ensure that we have received your most recent payment.
In order to discuss or modify this payment, please give our support staff a call at (786) 902-8579. To cancel, call us at (786) 902-8579. The email continues.
These emails aim to terrify recipients into calling the scammer’s “support” phone number by making them believe that their PayPal account read more about iCloud Calendar abused to send phishing emails from Apple’s servers.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.