Phishing Attack Targets Job Seekers via Calendly

• •Phishing scheme targets job seekers using Calendly.
• •Victims are redirected to fake Google login pages to steal credentials.
• •Attackers aim to intercept two-factor authentication codes.

Researchers from Malwarebytes have uncovered a phishing scheme targeting job seekers using Calendly. The attackers impersonate a booking page for interviews at Meta, prompting victims to enter personal information like names, email addresses, and phone numbers. After this, victims are redirected to a fake Google login page designed to steal credentials and intercept two-factor authentication codes. While victims are on the fraudulent site, attackers attempt to log into the real Google account using the stolen data. If a verification code is requested, the fake site asks for the same code, allowing attackers to gain access before it expires. The phishing site also claims that a calendar invitation has been sent, promising a response within 90 minutes, which may further delay the victim's suspicion.