Google Calendar phishing campaign hijacks sessions, bypasses MFA

A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material Security examines how Operation CloudFire tracked the attacks, blocked malicious messages, and helped take down…

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.