Google Calendar phishing campaign hijacks sessions, bypasses MFA
The campaign, tracked as Operation CloudFire by Material Security, used Google Calendar as a social engineering vector and trusted redirects to deceive users into compromising their sessions. Nearly 900 malicious domains were involved. The attack successfully bypassed MFA, a significant security concern for enterprises relying on Google Workspace and standard MFA defenses.
Key points
- Phishing used Google Calendar invites and fake login pages to target corporate accounts
- Attack successfully bypassed multi-factor authentication
- Nearly 900 domains used in the campaign were identified and taken down
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
