iCloud Calendar abused to send phishing emails from Apple’s servers
iCloud Calendar invites are being misused to send callback phishing emails that seem like purchase notifications straight from Apple's email servers. This increases the likelihood that the emails will get past spam filters and reach their intended recipients' inboxes.
A reader sent BleepingComputer an email earlier this month claiming to be a payment receipt for $599 that had been charged to the recipient's PayPal account. If the recipient wanted to talk about the payment or make modifications, this email offered a phone number.
Good day, client Payment of $599.00 has been made to your PayPal account. Please check the email to ensure that we have received your most recent payment.
In order to discuss or modify this payment, please give our support staff a call at (786) 902-8579. ...