Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign
Check Point, Thursday, October 15th, 2026
Check Point identified large phishing campaigns using fake calendar invites to steal Microsoft account credentials.
Check Point researchers identified several large-scale phishing campaigns abusing fake meeting invitations to harvest Microsoft credentials from thousands of organizations, some arriving as .ics attachments while others use different delivery techniques to land in inboxes.
Because calendar invites are routine and rarely questioned, they are effective lures.
The post details campaign examples and how organizations can detect and block them.