Surge in Calendar Invite Phishing Threatens Users

• •Calendar invite phishing has increased by 33,000% from May to September 2026.
• •Malicious events can appear directly on calendars, bypassing email spam filters.
• •Users should verify suspicious invites before interacting and adjust calendar settings.

Calendar invite phishing has surged by approximately 33,000% from May to September 2026, according to Sublime, a security firm. Attackers exploit the trust users have in calendar software, allowing malicious events to appear directly on calendars, often mimicking legitimate meetings. These phishing attempts typically come from unknown senders and use urgent language to prompt immediate action, such as payment requests or account warnings. Users are advised to avoid interacting with suspicious invites and to verify their legitimacy through trusted contacts. Google and Microsoft offer settings to help reduce exposure to unsolicited calendar invitations. The current status indicates a significant increase in reported incidents, with month-to-month increases reaching over 1,000% in later periods.