RICHTVXNEWS
Google Calendar phishing campaign hijacks sessions, bypasses MFA
BLEEPINGCOMPUTER — A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material Security examines how Operation CloudFire tracked the attacks, blocked malicious messages, and helped take down nearly 900 domains used by the attackers.…
- CODE
- RT-D6DD46
- PUBLISHER
- BleepingComputer
- TOPIC
- Cybersecurity
- PUBLISHED
- 04 November 2026 · 15:00 UTC
- FIRST SEEN
- 04 November 2026 · 15:15 UTC
- ORIGINAL
- https://www.bleepingcomputer.com/news/security/google-calendar-phishing-campaign-hijacks-sessions-bypasses-mfa/
- SHA-256
- ea3fcbfed066cb3a65a62d8a55a9a5269ab6b89461519ba77484543919351013
The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.
Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.