Beware of a phishing scam using real-looking iCloud calendar invites claiming a PayPal charge.
In this week’s scam, you receive an email for an Apple iCloud Calendar invitation. The invitation is sent from a genuine Apple email address and appears to be related to a purchase invoice. When you look at the invitation’s notes, you see an alarming message about a large charge to your PayPal account. The message includes a phone number and directs you to call to speak to a support team.
However, this is actually a clever phishing scam. Cybercriminals created a real calendar invitation, but put a phony purchase message in the notes, hoping to scare you. The phone number in the message doesn’t connect to a real support team, but instead goes directly to a scammer. If you call the number, the scammer will try to trick you into giving them full control of your computer so they can steal your money and personal information!
Tips to Stay Safe
Follow these tips to avoid falling victim to this phishing scam:
- Be suspicious of any calendar invitation you weren’t expecting, especially if it contains an urgent message about a purchase.
- Never call a phone number listed in an unexpected email. If you’re concerned about a purchase, log in to your account directly on the official website or app to check your transaction history.
- Don’t accept or decline suspicious calendar invitations, as this can confirm to scammers that your email address is active. Instead, simply delete the email.
Stop. Look. Think. And don’t be fooled.
Tips of the Week Brought to You By Our Partners at KnowBe4
KnowBe4 is the world’s most popular integrated platform for awareness training combined with simulated phishing attacks. Let Keller Schroeder show you how KnowBe4 has helped thousands of organizations just like yours manage the continuing problem of social engineering. Contact us today to learn more.
