# Calendar phishing surges 33,000% in four months

> Attackers are exploiting calendar invites to bypass email filters and install remote access tools that give them full control of victims' computers.
- Title: Calendar phishing surges 33,000% in four months · TechRadar
- Summary: Attackers are exploiting calendar invites to bypass email filters and install remote access tools that give them full control of victims' computers…
- Keywords: phishing, calendar attacks, cybersecurity, email security, remote access tools, sublime, ics files, technology, Calendar, surges, 000, four
- Source: TechRadar — https://techradar.com/pro/security/keep-seeing-strange-meetings-and-events-in-your-calendar-it-might-be-because-calendar-based-phishing-has-jumped-33-000-percent-since-may-and-they-work-even-if-the-email-is-sent-to-spam
- Published: 2026-09-18T11:30:00+00:00
- Read time: 1 min
- Topics: phishing, calendar attacks, cybersecurity, email security, remote access tools, sublime, ics files, technology
## Calendar invites become phishing weapon
Cybersecurity researchers Sublime report that calendar-based phishing attacks have exploded since May twenty twenty-six. Attackers send malicious calendar invites using free services like Gmail.
## Why calendar attacks bypass defenses
Because both Gmail and the target service are legitimate, the invites slip past email security filters. Victims see the attack twice: once in inbox, once in calendar.
## The malicious payload inside
Calendar invites contain links to download remote management tools like ScreenConnect. Once installed, attackers gain full control to deploy ransomware, infostealers, and steal passwords and documents.
## Attack growth accelerates sharply
From May to June attacks rose two hundred eighty two percent. By August they jumped one thousand two hundred sixteen percent. September projections show two thousand eight hundred fifty two percent growth over August.
## Researchers declare attack mainstream
Sublime says the August and September spikes show calendar phishing has finally hit the mainstream. The total increase from May to September is projected at approximately thirty three thousand percent.

> The jumps in August and September appear to be indicators that this attack type has finally hit the mainstream.
## How to protect yourself
Users should scrutinize suspicious calendar invites, verify senders, and treat calendar file attachments with caution. Watch for suspicious calls to action and financial urgency tactics.
## Key takeaway

Calendar-based phishing attacks have surged thirty three thousand percent since May twenty twenty-six, bypassing email security by using legitimate services to send malicious calendar invites.