Check Point researchers have identified a large-scale phishing campaign using fake Microsoft calendar invites to steal account credentials. Since late September 2026, over 300,000 phishing emails containing malicious .ics attachments or deceptive links have targeted more than 40,000 organizations, with daily attack volumes rapidly increasing through October. The campaign exploits user trust in calendar invites by delivering credential-harvesting links disguised as legitimate Microsoft login pages.
Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign
