Does the following screenshot look familiar to you? Calendar invites that seem to appear out of nowhere in Microsoft Teams or Outlook, asking you to “review important information” or “resolve an account issue”?

A phishing campaign has been found abusing Microsoft Teams calendar invites to deliver malicious links and files directly onto users’ calendars. These events often mimic Microsoft notifications, come from odd or external addresses, and include attachments such as .htm or .js files that, when opened, they can lead to credential theft, malware installation or even full remote access for the attacker.

With phishing tactics evolving so quickly, ongoing awareness training remains critical and essential. Effective programs use realistic phishing simulations combined with targeted training to help employees recognize and report suspicious emails quickly, turning them into an active detection layer alongside your technical controls.

At Ringus, we offer phishing simulation assessment services, with the following key features:
💫Tailor-made realistic phishing templates
💫Flexible campaign duration and cadence
💫Comprehensive reporting and analytics with insights