FraudHIGH

Beware of Fake Malwarebytes Renewal Notices in Your Calendar

MWMalwarebytes Labs
Malwarebytesscamcalendar phishingfake billingidentity theft
🎯

Basically, scammers are sending fake calendar notices to trick you into calling them about fake charges.

Quick Summary

Scammers are sending fake renewal notices from Malwarebytes in calendar invites. Victims may be tricked into calling fake billing numbers, risking their financial information. Stay alert and verify any suspicious invites.

What Happened

Scammers? are launching a new campaign that sends fake calendar invitations impersonating Malwarebytes. These fraudulent notices claim that a renewal charge has been processed, urging recipients to call a fake billing number. The amounts listed in these invitations can be quite high, often reaching hundreds of dollars for services that don’t actually exist. The goal is to create urgency, making you react quickly without thinking critically.

The calendar invitations? look convincing, mimicking the format of a professional billing receipt. However, they contain numerous red flags that indicate fraud. For example, the language used is often awkward or incorrect, and the formatting is inconsistent. These details should raise suspicion and prompt caution.

Who's Being Targeted

Anyone who uses calendar applications like Google Calendar or Outlook could fall victim to this scam. The invitations are designed to look like legitimate billing notices, targeting both individuals and businesses. Scammers? aim to exploit the trust that users have in these applications, making it crucial for everyone to be vigilant.

Once a victim calls the provided number, they become vulnerable to various tactics aimed at extracting personal and financial information. This could lead to identity theft or unauthorized charges on their accounts. The scammers? are skilled at creating a sense of urgency, which can easily lead to panic and poor decision-making.

Signs of Infection

The signs of this scam can be subtle yet alarming. If you receive a calendar invitation that you did not create, especially one that discusses billing or payments, treat it with suspicion. Look for signs such as:

  • Unusual formatting or language errors in the invitation.
  • A title that seems off, such as “Subscription Renewal: [random code].”
  • A lack of a legitimate sender’s email address.

If you notice any of these signs, do not engage with the invitation. Instead, delete it immediately and consider reporting it to your calendar provider. Remember, legitimate companies do not send invoices or billing notices through calendar invites.

How to Protect Yourself

To protect yourself from these scams, follow these steps:

  • Do not call the number listed in the invitation. Instead, contact the company directly using verified contact information.
  • Adjust your calendar settings to prevent automatic additions of events from unknown sources. This will help keep your calendar free from unsolicited invitations.
  • Educate yourself about common phishing? tactics. Knowing what to look for can significantly reduce your risk of falling victim.
  • Use security software that includes web protection? features. This can help block access to known malicious domains and provide an additional layer of security.

If you’re unsure about a calendar event, consult with a trusted source or use tools like Malwarebytes Guard to assess the situation. Staying informed and cautious is your best defense against these types of scams.

💡 Tap dotted terms for explanations

🔒 Pro insight: This tactic mirrors traditional phishing schemes but leverages calendar invites, increasing the likelihood of user interaction and response.

Original article from

Malwarebytes Labs

Read Full Article

Related Pings

HIGHFraud

SocksEscort Botnet Taken Down in Major Fraud Operation

A global operation has taken down the SocksEscort botnet, which compromised thousands of routers for fraud. Victims included individuals and businesses, with millions lost. Authorities seized domains and servers, freezing millions in cryptocurrency.

SC Media·
MEDIUMFraud

Fake Shipment Tracking Scams Surge in MEA Region

Fake shipment tracking scams are on the rise in the MEA region, targeting online shoppers and small businesses. Scammers create urgency to trick victims into providing personal information. Stay vigilant and verify sources to protect yourself.

Group-IB Blog·
HIGHFraud

AI vs. Phishing: Can It Protect Your Smartphone?

Phishing attacks are becoming more sophisticated, targeting smartphone users. New research shows that AI might help combat these threats. Stay vigilant to protect your personal information and finances.

Dark Reading·
HIGHFraud

Banking Trojan Targets Brazil's Pix Users in Real-Time Attack

A new banking Trojan is targeting users of Brazil's Pix payment system. This malware uses live operators to steal money in real-time. If you're using Pix, it's crucial to stay vigilant and secure your accounts.

Dark Reading·
HIGHFraud

Phishing Attacks: How to Outsmart Cybercriminals

Phishing attacks are becoming more sophisticated, targeting individuals and organizations alike. This evolving threat can lead to financial loss and identity theft. Stay vigilant and learn how to protect yourself against these cybercriminals.

SC Media·
HIGHFraud

SocksEscort Proxy Network Busted, Millions in Fraud Stopped!

Authorities have taken down the SocksEscort proxy network, which was behind massive online fraud. Millions were stolen from victims worldwide. Law enforcement seized domains and servers, and froze $3.5 million in cryptocurrency. Stay vigilant to protect yourself from online scams!

Help Net Security·