Fake Calendly invites spoof top brands to hijack ad manager accounts

## Executive summary A highly targeted phishing campaign impersonating well-known brands uses fake Calendly invitations, AiTM and Browser-in-the-Browser techniques, and malvertising to steal Google Workspace and Facebook Business account credentials; the campaign uses anti-analysis controls, multiple hosted variants, and enables monetization and further malicious activity via compromised marketing/ad manager accounts.