Political Campaigns Exploit Google Calendar with Unsolicited Invites
Political campaigns are utilizing Google Calendar to send unsolicited political invites to users, raising security concerns. Experts advise disabling automatic additions and avoiding suspicious links.
Political campaigns have found an unexpected vector: personal calendars. Users are reporting mysterious calendar invites appearing in Google Calendar without their consent, carrying political messages. In one instance, an all-day invite for election day on October 27 appeared under the title "Elections - Sending Sarah to Miami." These invites appear to be an attempt to influence public perception using a tool relied upon by millions for daily organization.
Many recipients feared their accounts had been hacked, but cybersecurity experts explain that the mere appearance of the event does not indicate a breach. Popular calendar systems like Google and Microsoft allow anyone to send a meeting invite, notes Gil Messing, chief of staff at cybersecurity firm Check Point. In many cases, default settings automatically add these invites to calendars, which in itself is not a sign of compromise.
However, users must exercise caution because these invites can contain malicious content, such as dangerous links or files, warns Messing. To protect against potential threats, experts recommend avoiding unverified links or attachments in unknown invites and removing suspicious entries. Additionally, users can adjust Google Calendar settings to restrict automatic event additions so unknown senders cannot inject entries directly into their schedules.
