Phishing attacksCheck Point

Fake meeting invitations can steal accounts too: Check Point warns about calendar phishing

The research finds that fake meeting invitations exploit everyday work habits to direct readers to fake login pages. A normal calendar format does not establish that an invitation is trustworthy.

Anti-Ransomware · Compiled with SI agent assistanceOriginal Check Point research:Checked 2026.10.26
Illustration of an adult Chinese woman checking a calendar invitation on a laptop in a bright meeting room
Illustration · Source ↗ · About this image ↗

Source Facts

On 15 October, Check Point disclosed several calendar phishing campaigns. Calendar attachments or apparent meeting links lure users into signing in, exploiting features and trust rather than a software vulnerability.

The researchers say related activity in customer email increased markedly from 25 September. These observations do not mean all recipients were compromised. Organisations should include unfamiliar meeting invitations in phishing training and reporting procedures.

Next Steps for Businesses / Editorial Observations

Check the sender and destination URL even when a sign-in request appears in a calendar.

Next steps you can take

  • Verify unexpected meeting invitations through known contact details. Do not enter account information through unfamiliar links.
  • Report suspicious invitations to the IT team and check related email and calendar entries.

Original sources

Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of grain warehouse staff maintaining logistics operations with paper delivery notesIllustrationResearch reports · 2026.10.22

ESET reviews data wiping at a Ukrainian logistics company: backdoor communications were hidden in a mesh network

ESET ResearchOriginal scenario illustration of colleagues checking enterprise email account settings and an Exchange connection listIllustrationSecurity updates · 2026.10.20

Thunderbird fixes password transmission during Exchange setup: email clients need updates too

MozillaOriginal synthetic conceptual illustration of a mail server with checked envelopes and update packagesIllustrationSecurity updates · 2026.10.19

Roundcube patches message and attachment handling issues: administrators should schedule updates

Roundcube