Adobe · Phishing
Google Calendar phishing campaign hijacks sessions, bypasses MFA
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. The summary below says what is known so far.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
No technical write-up beyond the summary below yet.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.
Read the original reportBleepingComputer(opens in a new tab)
Products and services involved
- Adobe Campaign94% match confidence
Pulse
Last change 4d ago · Recheck overdue since 5 Nov 2026, 15:19 UK time
- Story4 Nov 2026, 15:19 UK time · 4d ago
Linked reporting from BleepingComputer (independent original reporting).
Read source (BleepingComputer)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- BleepingComputerNews
Google Calendar phishing campaign hijacks sessions, bypasses MFA
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Google Calendar phishing campaign hijacks sessions, bypasses MFA
- ProbableSummary fact75% confidence
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material Security examines how Operation CloudFire tracked the attacks, blocked malicious messages, and helped take down nearly 900 domains used by the attackers.