Google Calendar phishing campaign hijacks sessions, bypasses MFA
· bleepingcomputer.com · popularity 20/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at bleepingcomputer.com →
Summary
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material Security examines how Operation CloudFire tracked the attacks, blocked malicious messages, and helped take down nearly 900 domains used by the attackers. [...]
Found in: BleepingComputer. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 6.