Phishing Campaign Abuses iCloud Calendar Invites

Attackers are abusing iCloud Calendar invites to send PayPal-themed phishing messages that appear to come from Apple's servers ([email protected]), increasing their likelihood of bypassing spam filters. The invite contains a Notes field claiming an unauthorized $599 charge and instructs recipients to call a phone number; callers are then social-engineered to divulge credentials or install remote access tools.