Got phished through a fake Google Calendar invite last week

Clicked on what I thought was a meeting reminder from my boss. Took me to a login page that looked exactly like Google's. Put in my credentials before I realized the URL was off by one letter. Had to reset everything and spent 3 hours cleaning up the mess. Anyone else seen these calendar invite scams popping up more?

3 comments

3 Comments

miamitchell1mo ago

Wait, did the fake login page ask you for your 2FA code too? Because that happened to a buddy of mine last month and the scammers got through his two factor by having him type it in right there. The scary part is these fake Google pages are getting really good now, like they copy the exact fonts and spacing. I've started checking the URL bar twice before typing anything, especially if I got there through a link. It takes two extra seconds but saves hours of headache.

west.henry1mo ago

Exactly, and the wild thing @miamitchell is how this fits into a bigger pattern I've noticed. It's like scammers have realized that most people are on autopilot with their logins, especially for stuff like Google or email. We all just muscle memory type our password and 2FA code without even looking at the URL. I had a guy almost get me the same way with a fake PayPal login. He sent me a link that looked just like the real page, same layout, same colors. But the URL was a few letters off, like "paypa1.com" instead of "paypal.com." It's so easy to miss if you're not paying attention. Now I treat every login like I'm crossing a street, look both ways (check the URL) and never just trust the page because it looks right.

kelly_nelson9521d ago

Right? That's almost exactly how they got me with a fake Amazon login page last year. I was in a hurry and just typed everything including my 2FA code without even noticing the URL was "amaz0n.com" instead of the real one. It's creepy how these pages are designed to trick you when you're not fully paying attention, especially if you're on your phone.