{"id":287494,"date":"2019-06-16T15:42:17","date_gmt":"2019-06-16T20:42:17","guid":{"rendered":"http:\/\/itblog.lcisd.net\/?p=287494"},"modified":"2019-06-16T15:42:22","modified_gmt":"2019-06-16T20:42:22","slug":"spammers-exploiting-google-calendar-feature","status":"publish","type":"post","link":"https:\/\/itblog.lcisd.net\/?p=287494","title":{"rendered":"Spammers Exploiting Google Calendar Feature"},"content":{"rendered":"\n<p>\u00a0<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/image.email.sans.org\/lib\/fe9613727664077577\/m\/3\/6dec2207-4f17-450b-ad86-433c7cde0658.png\" alt=\"SANS NewsBites - Annotated News Update from the Leader in Information Security Training, Certification and Research\"\/><\/figure>\n\n\n\n<p>June 11, 2019<\/p>\n\n\n\n<p style=\"font-size:15px\">Spammers are using unsolicited Google Calendar invitations to lure  users to sites crafted to steal their credentials. Kaspersky researchers  recommend disabling the \u201cautomatically add invitations\u201d option in the  Google Calendar Event Setting menu. Spammers are also sending  unsolicited notifications through Gmail. John Strand spoke about this  issue at the SANS Pen Test HackFest Summit in November 2018.\u00a0(For the  link, see Ed Skoudis&#8217;s comment below.)<\/p>\n\n\n\n<p class=\"has-small-font-size\"><strong>Editor&#8217;s Note<\/strong><br><br> [<a href=\"https:\/\/www.sans.org\/newsletters\/newsbites\/editorial-board#ed-skoudis\">Skoudis<\/a>]<br> There are a lot of very interesting attack vectors for various  cloud-based services and information security pros need to understand  them so we can defend our organizations\u2019 critical data. John Strand\u2019s  talk at the SANS Pen Test Hackfest explained not only the Google  Calendar issue, but also several other attacks associated with various  cloud providers and their services. I consider it a must-watch.  <\/p>\n\n\n\n<p class=\"has-small-font-size\"><a href=\"http:\/\/www.youtube.com\/watch?v=EQ1-eP7e6w0&amp;feature=youtu.be&amp;t=525\">www.youtube.com<\/a>: The Clouds Are Out to Get Me! &#8211; SANS Pen Test HackFest Summit 2018 <\/p>\n\n\n\n<figure class=\"wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"The Clouds Are Out to Get Me! - SANS Pen Test HackFest Summit 2018\" width=\"750\" height=\"422\" src=\"https:\/\/www.youtube.com\/embed\/EQ1-eP7e6w0?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 June 11, 2019 Spammers are using unsolicited Google Calendar invitations to lure users to sites crafted to steal their credentials. Kaspersky researchers recommend disabling the \u201cautomatically add invitations\u201d option in the Google Calendar Event Setting menu. Spammers are also<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39,53,6],"tags":[],"class_list":["post-287494","post","type-post","status-publish","format-standard","hentry","category-calendar","category-g-suite","category-security"],"_links":{"self":[{"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/posts\/287494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=287494"}],"version-history":[{"count":11,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/posts\/287494\/revisions"}],"predecessor-version":[{"id":287505,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=\/wp\/v2\/posts\/287494\/revisions\/287505"}],"wp:attachment":[{"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=287494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=287494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itblog.lcisd.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=287494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}