Phishers Target Apple’s iCloud Calendar for Sneaky Attacks

2025-09-09

iCloud Used for Sophisticated Phishing Attacks

With email fraud filters becoming more advanced, cybercriminals are leveraging Apple’s iCloud to bypass security measures and distribute phishing emails. According to BleepingComputer, malicious actors are sending fraudulent calendar invites that claim a victim’s PayPal account has been billed hundreds of dollars for purchases.

The ploy involves directing victims to call a fake customer service number to dispute the charge. Once the target is on the line, bad actors try to trick them into downloading software that provides criminals access to personal and financial data while simultaneously setting up an opportunity to install malware.

Phishing Through Trusted Channels

This type of callback phishing scam is not new, but the iCloud-based attacks are particularly concerning because they originate from legitimate Apple accounts. Even though emails appear to come from a Microsoft 365 account controlled by bad actors and then forwarded via an Apple account, they typically don’t trigger red flags due to their apparent legitimacy.

These attacks benefit from appearing credible, thus increasing the likelihood of fooling targets who might otherwise be suspicious. As phishing messages grow more sophisticated, users must remain vigilant about all unsolicited communications, particularly those that demand immediate action.

Suspecting All Communications

Impersonating brands like Microsoft, Apple, Amazon, and PayPal is a common tactic used by bad actors. These attacks were once easier to detect due to typographical errors or grammatical mistakes but have since become harder to spot as they incorporate realistic messages paired with urgent language designed to pressure victims into action.

This combination of credible messaging and social engineering techniques can be particularly effective, especially against older consumers. In addition, cybercriminals exploit vulnerabilities in organizational platforms for financial gain, such as sending phishing requests on PayPal’s legitimate platform that appear highly convincing.