Google Calendar phishing campaign hijacks sessions and bypasses MFA

A sophisticated phishing campaign leverages Google Calendar invites, trusted redirects, and deceptive login pages to hijack corporate sessions and bypass multi-factor authentication protections. Security researchers tracked the activity and assisted in taking down nearly nine hundred malicious domains. Administrators are advised to remain vigilant against untrusted calendar invitations and closely monitor session tokens.