b'CYBER SECURITY CSIA 33Calendar Invitation PhishingC riminalsareusing calendarinvitationsto launchphishingattacks and break through email filtering.Lastyear,wesawanew By Jack Gerbs phishingtacticusedagainstthe Quanexus corporate world to steal employees logincredentials.Criminalsusedcompromised email addresses to send employees meeting invites withmaliciouslinksinthebodyoftheinvitation disguised as a virtual meeting link. The attack vector hasrecentlyworkeditswaydowntoindividuals at such a rate that Google had to take action last month.ManyphishingattacksuseMicrosoftdocuments orPDFsaspartoftheattackbecausetheywillBay Insulation typically make it through email filtering. A calendarSupplyinvite attack uses an ICS file for the same reason.Member of the Bay Family of CompaniesSome email clients will even add a calendar invite toSERVICE FROM 29 LOCATIONSa users calendar before they respond to the invite. Theattacksareevenmoreconvincingnowthat800 West Fairmont Drive, Suite 2108 Westhampton Drive2745 Market Street, Suite 100 virtual meetings are the norm in the workplace, andTempe, AZ85282Lexington, KY 40511Garland, TX75041 480-967-1881 859-254-0399 972-278-4900employees are regularly invited to unusual virtual3133 S. Dodge Blvd.6095 East River Road4411 B Darien Street Tucson, AZ 85713Fridley, MN55432Houston, TX77028 meetings. 520-777-0303 763-502-9977 713-675-181118825 Railroad Street5201 E. Front Street2701 Gattis School Road, Ste 110E City of Industry, CA91748Kansas City, MO64120Round Rock, TX78664 Thetacticwasusedextensivelyinthefirstpart626-626-2700 816-920-5900 512-582-0929130 Mason Circle, Suite B1705 Sulphur Avenue8559 NE Loop 410, Suite 132 of the year against personal user accounts to theConcord, CA94520St. Louis, MO63110San Antonio, TX 78219 925-691-9880 314-776-2002 210-610-9950extent that Google took action and added calendar3008 Orange Grove Avenue3555 Ponderosa Way, Unit E21840 76th Ave. South North Highlands, CA95660Las Vegas, NV89118Kent, WA98032 invitationstotheirlistofautomaticallyfiltered916-978-9071 702-891-5333 425-251-6750spam.Userscanalsochangeaccountsettings7328 Trade Street, Suite 2002630 Glendale Milford Rd308 Chenoweth Street San Diego, CA92121Cincinnati, OH45241Mount Vernon, WA98273 so only calendar invitations from known contacts858-530-0414 513-563-8200 360-399-662714200 East 33rd Place4755 West 150th Street, Suite E1017 North Bradley Road, Suite B automaticallyappearontheircalendar.CalendarAurora, CO80011Cleveland, OH44135Spokane Valley, WA99212 303-371-0505 216-362-7338 509-893-3411invitations from unknown users will still appear in5810 East Avenue2245 Westbelt Drive2929 Walker Drive Countryside, IL60525Columbus, OH43228Green Bay, WI54311 the users email inbox but will not be added to the614-345-0804 920-406-4100708-352-9663calendar without accepting the invitatio 3530 Developers Road3223 NW Guam Street823 South 60th Street, Suite R1 Indianapolis, IN 46227Portland, OR97210Milwaukee, WI53214 317-782-1144 503-248-9662 414-258-93332802 Independence Road5043 Martin Luther King Jr Fwy Iowa City, IA 52240Fort Worth, TX 76119locations listed in red 319-248-7602 817-617-4383 are CSIA memberswww.bayinsulationsupply.comcsiaonline.org'