iCloud Calendar invites are being exploited to send phishing emails that appear to be legitimate purchase notifications from Apple's email servers, thereby evading spam filters. These emails aim to trick recipients into believing their PayPal accounts have been charged fraudulently, leading them to call a scammer's support number for assistance. The phishing scheme leverages authentic email authentication methods, making the scams appear trustworthy.
A recent phishing scam has been exploiting Google's email system by using "no-reply" addresses to trick users into revealing sensitive information. The scam takes advantage of legitimate-looking emails to bypass security measures, highlighting the need for better user awareness and email authentication practices. Google has taken steps to improve its security protocols to combat such fraudulent activities.