{"id":35747,"date":"2019-06-27T08:49:14","date_gmt":"2019-06-27T00:49:14","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=35747"},"modified":"2019-06-27T08:49:16","modified_gmt":"2019-06-27T00:49:16","slug":"cybercriminals-use-smartphone-calendars-to-distribute-scam-offers","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2019\/06\/27\/cybercriminals-use-smartphone-calendars-to-distribute-scam-offers\/","title":{"rendered":"Cybercriminals use smartphone calendars to distribute scam offers"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Kaspersky experts have detected multiple cases of a sophisticated scam targeting users through fraudulent, unsolicited Google Calendar notifications and luring them into giving away their personal information. The attacks happened throughout May. This scam abuses a specific feature of a free online calendar service which adds invitations and events to users\u2019 calendars automatically. <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Spam and phishing that exploit non-traditional attack vectors can be lucrative for criminals, as they can catch out experienced users who might not fall for a more common threat. This is particularly the case when it comes to trusted legitimate services, such as default email calendar features, and these are exploited through so-called &#8220;calendar phishing&#8221;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The detection of multiple, unsolicited pop-up calendar notifications during May turned out to be a result of a blast of sophisticated spam email &nbsp;sent by scammers. The e-mails exploited a common default feature for people using Gmail on their smartphone: the automatic addition and notification of calendar invitations. The fraud occurs when the perpetrator sends an unsolicited calendar invitation carrying a link to a phishing URL. A pop-up notification of the invitation appears on the smartphone\u2019s home screen and the recipient is encouraged to click on the link.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In most of the cases observed, the user was redirected to a website featuring a simple questionnaire with prize money on offer. To receive the prize, the user is asked for a \u201cfixing\u201d payment for which they need to enter their credit card details and add some personal information, such as &nbsp;name, phone number and address. This data goes straight to the scammers who exploit it to steal money or identity information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe \u201ccalendar scam\u201d is a very effective scheme, as currently people have more or less got used to receiving spam messages from emails \u00a0or messengers and do not immediately trust them. But this may not be the case when it comes to the Calendar app, which has a main purpose to organize information rather than transfer it. So far, the sample we\u2019ve seen contains text displaying \u00a0an obviously weird offer, but as It happens, every simple scheme becomes more elaborate and trickier with time. The good news is \u2013 one also doesn\u2019t need any sophisticated precautions to avoid such scam \u2013 the feature that enables it can be easily turned off in the calendar settings,\u201d says Maria Vergelis, security researcher at Kaspersky. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">To avoid falling victim to malicious spam, Kaspersky researchers advise users to:<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Turn off the automatic adding of invites to your calendar. To do so, open Google Calendar, click the settings Gear Icon, then click Event Settings. In the \u201cautomatically add invitations\u201d option, click on the dropdown menu and select \u201cNo, only show invitations to which I&#8217;ve responded\u201d. Below this tab, in the View Options section, make sure \u201cShow declined events\u201d is NOT checked, unless you specifically wish to view these.<\/li><li>If you are not sure whether a website you are redirected to is real and safe, never enter personal information.<\/li><li>Use a reliable security solution for comprehensive protection from a wide range of threats, such as&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/security-cloud\">Kaspersky Security Cloud<\/a>.<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Spam and phishing that exploit non-traditional attack vectors can be lucrative for criminals, as they can catch out experienced users who might not fall for a more common threat. This is particularly the case when it comes to trusted legitimate services, such as default email calendar features, and these are exploited through so-called &#8220;calendar phishing&#8221;.<\/p>\n","protected":false},"author":6,"featured_media":35748,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,25],"tags":[101,54],"class_list":["post-35747","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","category-software","tag-kaspersky","tag-security"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/35747","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=35747"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/35747\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/35748"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=35747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=35747"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=35747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}