Resources and links
- ICS phishing: Stopping a surge of malicious calendar invitessublime.security
- Open source playbook to delete malicious or unwanted calendar eventssublime.security
- Hackers Weaponizing Calendar Files as New Attack Vector Bypassing Traditional Email Defensescybersecuritynews.com
- iCloud Calendar abused to send phishing emails from Apple’s serversbleepingcomputer.com
- Email bombingattack.mitre.org
- Direct Send abuse on Microsoft 365: Just another failed authenticationsublime.security
- Sublime rules on GitHubgithub.com
- Example Sublime rule: any HTML attachment from an untrusted sendersublime.security
- Example Sublime rule: calendar invite from a recently registered domainsublime.security
- Example Sublime rule: any unsolicited SAP filesublime.security