New Spam Bypasses Filters

Click to enlarge

During the past 12 months, Trend Micro says it has tracked spam in numerous formats but this is the first time the Google Calendaring system has been used as a mechanism, which is of concern as they are less likely to be set up to track for this new delivery mechanism.
In this latest attack, a twist on the Nigerian 419 scam or advance-fee fraud scam, spammers are using meeting invites to bypass anti-spam engines.  The e-mail invites are personalised with a different link sent to each recipient and may be configured to send meeting alerts in order to draw increased attention to the spam message. 
Trend Micro says that all businesses and end users should demonstrate extra caution when receiving unexpected meeting invitations and other unexpected mail.  On execution such attacks pose risks to recipients including the possibility of executing malicious code or other malware.