![\"A](\"https:\/\/www.montclair.edu\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/10\/calendar-phishing-screenshot-1024x784.png\")
<\/p>\n<\/p>\n
<\/p>\n
We\u2019ve recently observed a wave of Google Calendar phishing attacks<\/strong> targeting our campus community. Attackers are sending fake calendar invitations that reference PayPal, Bitcoin, cryptocurrency, invoices, or overdue payments<\/strong>. These invites often look legitimate and may even include links that lead to malicious websites.<\/p>\n Even if you don\u2019t click anything, these invitations can clutter your calendar and put your personal information at risk. It\u2019s important to know how to manage these invites and protect yourself.<\/p>\n 1. Change Your Calendar Settings<\/strong><\/p>\n To prevent unknown invites from automatically appearing on your calendar:<\/p>\n Open Google Calendar<\/strong> on a computer.<\/p>\n<\/li>\n Click the gear icon \u2192 Settings \u2192 Event settings<\/strong>.<\/p>\n<\/li>\n Find \u201cAutomatically add invitations\u201d<\/strong> under “Add invitation to my calendar”<\/strong> and select: No, only show invitations to which I have responded<\/em><\/strong><\/p>\n<\/li>\n<\/ol>\n This ensures that spam invitations won\u2019t automatically appear on your calendar.<\/p>\n Disclaimer:<\/strong> By selecting \u201cNo, only show invitations to which I have responded,\u201d new calendar invitations will not appear automatically on your calendar<\/strong>. You will only see events after you have accepted or responded to the invitation. This may cause you to miss or overlook pending invitations if you do not review them manually in your inbox. Be sure to check your email or invitation list regularly to avoid missing important events.<\/p>\n In Settings \u2192 Event settings \u2192 Notifications<\/strong>, you can turn off notifications for external invites.<\/p>\n<\/li>\n This helps reduce the chance of accidentally interacting with suspicious events.<\/p>\n<\/li>\n<\/ol>\n Disclaimer: <\/strong>If you turn off notifications for external invites, you will not receive alerts when someone outside your organization sends you a calendar invitation<\/strong>. You may miss new meeting requests unless you check your calendar or email regularly.<\/p>\n Watch for calendar events that:<\/p>\n Come from unknown email addresses.<\/p>\n<\/li>\n Mention cryptocurrency, PayPal, invoices, or overdue payments.<\/p>\n<\/li>\n Include links or attachments that ask for credentials.<\/p>\n<\/li>\n Include a phone number in the event description<\/strong>.<\/p>\n Why attackers add phone numbers:<\/strong><\/p>\n Phishers often include a phone number to make the invite look more legitimate and urgent. They want you to call the number for \u201cbilling\u201d or \u201cverification,\u201d but this is a social engineering tactic<\/strong> designed to gain access to your accounts. Do not call these numbers or reply to the sender.<\/strong> Legitimate organizations will not request sensitive information through calendar invites.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n Important:<\/strong> If you were not expecting the invite<\/strong>, do not interact<\/strong> with it in any way\u2014ignore, delete, and report.<\/em><\/p>\n \u201cInvoice #XXXX \u2013 Payment Overdue\u201d<\/p>\n<\/li>\n \u201cPayPal Notification \u2013 Action Required\u201d<\/p>\n<\/li>\n \u201cBTC Payment Received \u2013 Confirm Your Account\u201d<\/p>\n<\/li>\n \u201cCrypto Wallet Alert \u2013 Verify Your Account\u201d<\/p>\n<\/li>\n \u201cUnpaid Invoice \u2013 Urgent Payment Required\u201d<\/p>\n<\/li>\n \u201cBitcoin Transaction Pending\u201d<\/p>\n<\/li>\n \u201cPayment Request from [Random Name]\u201d<\/p>\n<\/li>\n \u201cRefund Confirmation \u2013 Action Needed\u201d<\/p>\n<\/li>\n \u201cWire Transfer Details \u2013 Open Immediately\u201d<\/p>\n<\/li>\n \u201cUrgent: Account Verification Required\u201d<\/p>\n<\/li>\n<\/ul>\n Do not click <\/strong>on any links or respond \u201cYes\/No\/Maybe.\u201d<\/p>\n<\/li>\n Do not <\/strong>contact the sender or call the phone number listed.<\/p>\n<\/li>\n Delete the event<\/strong> from your calendar.<\/p>\n<\/li>\n Report it to Google<\/strong>:<\/p>\n Open the event \u2192 Click More Forward a copy to phishfiles@montclair.edu<\/a><\/strong>.<\/p>\n<\/li>\n<\/ul>\n Never share your Google credentials or authentication codes.<\/p>\n<\/li>\n If you weren\u2019t expecting the invite, do not interact<\/strong>.<\/p>\n<\/li>\n Verify directly with the sender through official channels if you\u2019re unsure (never through the calendar invite).<\/p>\n<\/li>\n Share this information with classmates, colleagues, or team members to help protect the entire campus community.<\/p>\n<\/li>\n<\/ul>\n By following these steps, you can reduce exposure to calendar-based phishing attacks<\/strong> and keep your personal information safe.<\/p>\n We\u2019ve recently observed a wave of Google Calendar phishing attacks targeting our campus community. Attackers are sending fake calendar invitations that reference PayPal, Bitcoin, cryptocurrency, invoices, or overdue payments. These invites often look legitimate and may even include links that lead to malicious websites. Even if you don\u2019t click anything, these invitations can clutter […]<\/p>\n","protected":false},"author":349,"featured_media":1120,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-phishing"],"_links":{"self":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/comments?post=1119"}],"version-history":[{"count":10,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1119\/revisions"}],"predecessor-version":[{"id":1385,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1119\/revisions\/1385"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media\/1120"}],"wp:attachment":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media?parent=1119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/categories?post=1119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/tags?post=1119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nHow to Protect Your Google Calendar<\/strong><\/h2>\n
\n
2. Adjust Notifications<\/strong><\/h3>\n
\n
3. How to Identify Suspicious Invites<\/strong><\/h3>\n
\n
\n
4. Examples of Suspicious Event Subjects<\/strong><\/h3>\n
\n
5. Steps to Take if You Receive a Phishing Invite<\/strong><\/h3>\n
\n
\n
![\"\"](\"https:\/\/www.montclair.edu\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/10\/more-dots.png\")
\u2192 Report as spam<\/strong>.<\/p>\n<\/li>\n6. Stay Vigilant<\/strong><\/h3>\n
\n
Additional Notes:<\/h2>\n
\n