China-linked hackers exploit Google Calendar in cyberattacks on governments

Google analysts attributed a late-October espionage campaign to China-linked APT41 in which spearphishing led victims to a malicious ZIP hosted on a hijacked government site; the archive deployed a stealthy in-memory malware family dubbed ToughProgress that used Google Calendar as a covert command-and-control and data exfiltration channel by embedding encrypted data and commands into calendar events.