DOTHAN, Ala. (WDNews) – Apple users are being urged to watch for a new phishing scam that uses iCloud Calendar invites to sneak past security filters.
According to Bleeping Computer, one victim reported getting an email that appeared to be a PayPal receipt for a large purchase. The message told the recipient to call a “support team” to dispute the charge. Scammers hope victims will make the call and unknowingly provide personal details that could be used to access accounts or steal money.
What makes this scam unusual is that the email was sent from “[email protected],” making it appear to come directly from Apple. In reality, it was an iCloud Calendar invite, a method that can bypass traditional spam protections.
Bleeping Computer explained that the invites may have been distributed through a Microsoft 365 mailing list, which forwarded the phishing messages to all members. While the scam itself is not new, the use of Apple’s legitimate email servers and calendar invite system gives it a false sense of authenticity. Officials advise users to delete suspicious calendar invites or emails immediately and avoid responding to them.
