A growing trend in digital security involves calendar-based phishing, where attackers send unsolicited meeting invitations to users' digital calendars. These entries often appear legitimate, referencing project reviews or other professional tasks to create a sense of urgency or curiosity. When a user clicks on the link provided within the calendar event, they are redirected to a deceptive website designed to mimic a real login portal.

Once on these sites, victims are prompted to enter their credentials. If a user provides their username and password, the attackers capture this information. According to security reports, these stolen credentials are then often bundled and sold in bulk on illicit markets or used by the fraudsters to gain unauthorized access to the victim's personal or corporate accounts. This method exploits the trust users place in their calendar applications, which are typically viewed as safe, personal spaces for organizing daily tasks. Security experts advise users to remain skeptical of unexpected meeting invites and to verify the source of any links before entering sensitive information.