ICalendar is a calendar platform that uses the iCalendar (ICS) format to enable sharing and subscriptions across devices.
Overview
ICalendar is a calendar platform that uses the iCalendar (ICS) format to enable sharing and subscriptions across devices. Recent reporting indicates attackers are abusing calendar subscriptions and the iCalendar format to deliver phishing and malware, turning trusted calendar infrastructure into an attack surface with wide potential impact on synced devices.
Related Threat Clusters
-
Exploitation of Triofox Vulnerability CVE-2025-12480 by Hackers
Cyber threat actors are exploiting a critical unauthenticated access vulnerability in Gladinet’s Triofox file-sharing platform, tracked as CVE-2025-12480. This vulnerability allows unauthorized administrative access and…
3 articles · Updated November 11, 2025 -
Threat Actors Exploit Calendar Subscriptions for Phishing and Malware Delivery
Threat actors are manipulating digital calendar subscription services to deliver phishing and malware content. This exploitation affects users of synced calendars, including platforms like Google Calendar and iCalendar,…
3 articles · Updated November 28, 2025 -
Hackers Exploit iCalendar Files for Cyber Attacks
Hackers are increasingly using the iCalendar file format to bypass traditional email defenses and deploy malicious payloads. This new attack vector targets users who receive calendar invites, potentially compromising…
2 articles · Updated November 11, 2025 -
Exploitation of Triofox Vulnerability CVE-2025-12480 by UNC6485 Threat Group
Hackers have exploited a critical unauthenticated access vulnerability (CVE-2025-12480) in Gladinet's Triofox file-sharing platform, allowing them to gain unauthorized administrative access and execute remote code. The…
5 articles · Updated November 12, 2025
Recent Intelligence Reports
- Threat Actors Exploit Calendar Subscriptions for Phishing and Malware Delivery — Infosecurity-Magazine · November 28, 2025
- Synced calendars a potential threat vector for millions of devices — Scworld · November 26, 2025
- Hackers Exploiting Triofox 0 — Cybersecuritynews · November 11, 2025
- From calendar to compromise: How hackers exploit the iCalendar format — Cyberdaily.Au · November 10, 2025