## Datalyst Blog
Datalyst delivers expert managed IT services in Providence, RI. Optimize performance, secure your systems, and grow with us. Contact us today!
[ Categories ](https://datalyst.directivesites.com/blog/categories "Categories")
[ Tags ](https://datalyst.directivesites.com/blog/tags "Tags")
[ Categories: All Categories ](https://datalyst.directivesites.com/javascript:void(0); "Categories")
Search...Suggested keywords
[ x ](https://datalyst.directivesites.com/javascript:void(0);)
# Don’t Be Snagged by This Google Calendar Phishing Scam
[Datalyst Blog](https://datalyst.directivesites.com/blog/categories/blog) [Security](https://datalyst.directivesites.com/blog/categories/security)
[Daniel Mathieu](https://datalyst.directivesites.com/blog/blogger/daniel-mathieu)
Friday, 18 October 2019
[ 0 Comments ](https://datalyst.directivesites.com/blog/don-t-be-snagged-by-this-google-calendar-phishing-scam#comments)
[  ](//datalyst.directivesites.com/images/easyblog_shared/October_2019/10-18-19/scam_284587968_400.jpg "Don’t Be Snagged by This Google Calendar Phishing Scam")
Gmail and the applications associated with it seem to have some level of inherent trust among users. We just don’t anticipate threats to come in via something from Google. However, it does happen, as a recent spat of phishing has shown using Gmail and Google Calendar. What’s worse, this particular scam has been around for some time.
We’ll review how the scam works, and what can be done to protect your business from its effects.
## How This Scam Works
Let’s outline the scenario: a user logs into their Google account and finds an invite for a Google Calendar event. The invite is for a crucial company-wide meeting - apparently to discuss a new vision for the company, changes to policies moving forward, that kind of thing - that is scheduled to take place at the end of the day. A link is included for the complete agenda to the meeting. Clicking the link brings the user to an authentication page, where the user inputs their credentials.
Uh oh… the user was caught up in the scam.
This scam is unnervingly simple to enact. An invite is sent to a user for a calendar event, which is automatically added, and the user notified. In that notification, a scammer includes fraudulent links to a facsimile Google login page - which is actually just a means for a hacker to steal the user’s credentials. Sometimes, this link will just allow malware to install itself on the user’s systems.
Some attackers have fooled personal users by claiming that they won a cash prize - informing them through the fraudulent calendar entry.
## How This Was Discovered
This scam was actually first reported back in 2017 by researchers at an IT security firm, but no apparent steps to resolve it were taken by Google.
One of the researchers noticed that an unfamiliar calendar event had been added to their Calendar when another user at the firm shared an upcoming flight itinerary through Gmail. However, the event was automatically added to the researcher’s calendar. Digging deeper into the implications this accident brought up, the firm realized that an email doesn’t need to be sent to add an event to someone’s calendar. Then came the thought: sure, we all know to look for phishing in our emails, but would we ever question a Calendar entry?
As the firm’s tests indicated: apparently not.
## How to Help Stop This Scam
While Google is still working on a fix - after finally acknowledging the issue, that is - there are a few things that your users can do to help prevent this scheme from taking advantage of your business. They need to disable any events from Gmail being added to the Calendar automatically, and they also need to disable any event invitations from being automatically added as well.
These options can be found in **Settings** in the Google Calendar application. Under **Event settings**, **deselect** the option for **Events from Gmail** to “**Automatically add events from Gmail to my calendar**.” You also need to change the **Automatically add invitations** option to “**No, only show invitations to which I have responded**.”
Hopefully, enacting this will keep you from experiencing a phishing attack from an unexpected source - your agenda. Subscribe to our blog for more information about optimizing your IT (and its security), and for more assistance, give Datalyst a call at (774) 213-9701.
[ ](https://datalyst.directivesites.com/javascript:void(0);) [ ](https://datalyst.directivesites.com/javascript:void(0);) [ ](https://datalyst.directivesites.com/javascript:void(0);)
Tags:
[Security](https://datalyst.directivesites.com/blog/tags/security) [Email](https://datalyst.directivesites.com/blog/tags/email) [Phishing](https://datalyst.directivesites.com/blog/tags/phishing)
[ Cybersecurity Insurance Gaining Steam ](https://datalyst.directivesites.com/blog/cybersecurity-insurance-gaining-steam)
[ How to Keep Your Employees from Burning Out ](https://datalyst.directivesites.com/blog/how-to-keep-your-employees-from-burning-out)
About the author
[  ](https://datalyst.directivesites.com/blog/blogger/daniel-mathieu)
[Daniel Mathieu](https://datalyst.directivesites.com/blog/blogger/daniel-mathieu)
[ ](https://datalyst.directivesites.com/javascript:void(0); "Subscribe to updates from author") [ ](https://datalyst.directivesites.com/javascript:void(0);) [ ](https://datalyst.directivesites.com/blog/blogger/daniel-mathieu)
Dan is a trusted IT advisor with a background of over 25 years in IT and continuously works on the challenges of putting the right people in place to drive business growth and customer satisfaction.
Author's recent posts
[More posts from author](https://datalyst.directivesites.com/blog/blogger/daniel-mathieu)
[ Friday, 31 July 2026 Are You Paying for Inactive Software? ](https://datalyst.directivesites.com/blog/are-you-paying-for-inactive-software)
[ Wednesday, 29 July 2026 3 Reasons Why Storing Business Files Locally is Obsolete ](https://datalyst.directivesites.com/blog/3-reasons-why-storing-business-files-locally-is-obsolete)
[ Tuesday, 28 July 2026 Combating Software Bloat and Cyber Risks ](https://datalyst.directivesites.com/newsletter-content/combating-software-bloat-and-cyber-risks)
Comments
No comments made yet. Be the first to submit a comment
**** Already Registered? [Login Here](https://datalyst.directivesites.com/home/login-logout?return=aHR0cHM6Ly9kYXRhbHlzdC5kaXJlY3RpdmVzaXRlcy5jb20vYmxvZy9kb24tdC1iZS1zbmFnZ2VkLWJ5LXRoaXMtZ29vZ2xlLWNhbGVuZGFyLXBoaXNoaW5nLXNjYW0=)
Tuesday, 04 August 2026
Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)
**Captcha Image**