Threat Actors Exploit Calendar Subscriptions for Phishing and Malware Delivery

Threat actors are manipulating digital calendar subscription services to deliver phishing and malware content. This exploitation affects users of synced calendars, including platforms like Google Calendar and iCalendar, which can inadvertently distribute malicious links through event notifications. The attack leverages abandoned domains that were previously used for legitimate calendar subscriptions.