03/30/2026

Most organizations have robust email filtering systems which prevent the majority of malicious emails from arriving in inboxes. As a result attackers are always looking for new ways to trick these email filters. The lastest technique is to include a notification of a subscription renewal within a Google meet invite. These emails come from a legitimate email address and contain no links just a phone number. With no malicious flags to detect, the emails are considered legitimate by the email filters.

To add to the annoyance, if you don’t have your calender setup correctly, the event is scheduled into your calendar automatically without any interaction on your part.  When the meeting reminder is sent out, you are shown the fake subscription renewal again, increasing the chances you will respond.

While there is nothing you can do to prevent the invite from arriving in your inbox, you can prevent the meeting from being scheduled into your Google calendar. Open your calendar, choose Settings>Event settings and in the Add invitations to my calendar drop down select When I respond to the invitation in email.

This ensures only calendar invites that you respond to will get scheduled in your calendar.  Attackers will no longer be able to schedule meetings quietly in the background without your knowledge.  It is one small thing that you can do to make the attacker’s life a little more difficult and yours a bit easier.