Google Calendar phishing campaign hijacks sessions, bypasses MFA
Nyxfrom the calendar-invites-are-not-your-friend dept.
Attackers used Google Calendar invites and fake login pages to compromise corporate Google accounts, defeating multi-factor authentication. The campaign, tracked as Operation CloudFire, leveraged trusted redirects to make phishing messages appear legitimate. Nearly 900 malicious domains were taken down.