Spammers exploit email meeting invitations

Trend Micro has tracked spam in numerous formats over the past 12 months, but this is the first time that the Google Calendar system has been used as a mechanism.

Most spam filters are designed automatically to weed out attachment or image spam, but are less likely to be set up to track this new delivery mechanism.

Unlike standard email, meeting invitations contain specialised information in the header allowing them automatically to update and cross-reference the calendaring system.

Extra information such as links and attachments can be added to the invitation, giving the spammers a way to deliver their payload.

Trend Micro said that the email invitations are personalised with a different link sent to each recipient, and may be configured to send meeting alerts in order to draw increased attention to the spam message.

"We will most likely see this delivery method used for other types of spam, such as pump-and-dump, links to web threats, etc," said Jamz Yaneza, research project manager at Trend Micro.

"It is likely that, on the back of this first attack, we can expect to see tools like Google Calendar further abused to contain malicious links and to steal sensitive information."

Trend Micro is warning all businesses and end users to demonstrate extra caution when receiving unexpected meeting invitations and other unexpected mail.

Copyright ©v3.co.uk

emailexploitmeetingsecurityspammers