Phishing campaigns that impersonate a single brand are often assumed to come from a single source, but that assumption rarely holds up. Calendly is a widely used scheduling platform for booking meetings and interviews, making it a highly believable lure in phishing campaigns. Calendly-themed phishing shows how one trusted workflow can be abused by multiple, unrelated phishing kits at the same time.