Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign

A calendar invite is one of the most routine messages in the modern workplace. It lands in the inbox, asks for a few seconds of attention, and is rarely questioned. Attackers know this, and they are now using fake meeting invitations to steal Microsoft account credentials.