iCloud Calendar Invites Abused to Phish PayPal Users via Legitimate Infrastructure
ID: 791acbca-315a-5c92-bb3d-2f554fb3dab2
STIX ID: report--791acbca-315a-5c92-bb3d-2f554fb3dab2
Feed Name: Zimperium Blog
Threat Score
Attackers are abusing iCloud Calendar invites (delivered from legitimate Apple servers and routed through Microsoft 365 forwarding) to deliver PayPal-themed phishing notifications that prompt recipients to call a fraudulent support number; the technique leverages mobile UI limitations to increase credibility and can lead to malware installation or social-engineered fraud.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.