iPhone Calendar Scam: Fake Invites Steal Data

Cybersecurity experts are alerting iPhone and iPad users to a pervasive new scam that manipulates calendar invites. Attackers exploit these legitimate notifications to push fake alerts, designed to frighten or mislead users into divulging sensitive data, including login credentials and financial information.

This sophisticated tactic does not involve installing any malicious apps or software. Instead, it is triggered when users inadvertently click on a deceptive online link, leading them to subscribe to hidden calendars. Once subscribed, scammers can flood devices with unlimited notifications, often containing links or phone numbers intended for phishing purposes.

Apple users are strongly advised to avoid interacting with suspicious calendar notifications. To combat this threat, users should navigate to Settings, then Apps, Calendar, Calendar Accounts, and Subscribed Calendars to identify and delete any unfamiliar subscriptions. Alternatively, users can remove unwanted subscriptions directly within the Calendar app by marking suspicious events as junk.

Security professionals emphasize that Apple will never use the Calendar app to send virus warnings or phishing messages. This type of notification-based scam is expected to rise as attackers seek new methods to circumvent app store security, underscoring the importance of vigilance and prompt action from users.