Calendar phishing is a social-engineering tactic that uses deceptive meeting invitations or calendar entries to persuade people to click a malicious link, open an attachment, or provide credentials. Because calendar requests are a familiar part of workplace routines, recipients may treat them as ordinary business communications.
In credential-harvesting attacks, an invite may direct a user to a fraudulent sign-in page that captures passwords or session tokens. A targeted invitation does not by itself mean anyone clicked it or that an account was compromised. Defenses include reporting unexpected invites, checking links and sign-in prompts carefully, using email and calendar anti-phishing controls, and adopting phishing-resistant multi-factor authentication such as FIDO/WebAuthn.