Ongoing phishing attack abuses Google Calendar to bypass spam filters

An active phishing campaign is abusing legitimate Google Calendar invites and Google Drawings/Forms to bypass spam filters and deliver credential-stealing links; Check Point observed ~300 brands targeted and over 4,000 emails in four weeks. The attackers exploit the legitimacy of Google services (invitations that pass DKIM/SPF/DMARC) and may follow cancellations with additional links to increase clicks; organizations and users should treat unsolicited calendar invites cautiously and enable Workspace protections.