Google Calendar Can Now Be Hacked

By Shakir Bukhari

 

Google has warned the cybersecurity community and users alike of "threat actors potentially abusing Google Calendar," as per a Tech Radar report.
Hackers have reportedly been sharing a "proof of concept code" to Github, called "Google Calendar RAT (GCR)," that allows hackers to set up a command and control (C2) infrastructure within Google Calendar. The script's creator, going by the handle 'MrSaighnal,' claims that it will establish a "covert channel" by taking advantage of the calendar's event descriptions.



According to Google, a device that has GCR will routinely scan the Calendar event description for updated commands and execute them on the device. The revised command output will then be updated in the event description.
So far, no hackers have been observed abusing GCR in the wild, but with things like these, it's only a matter of time. 



Google has recommended several mitigation techniques for the newest attack, such as:
  • Employing "architect systems with a defense-in-depth approach," to reduce the cyber attack risk.
  • Using an Intrusion Detection System (IDS) and network monitoring tools to detect the activity traffic caused by the attacks.
  • Implementing a "robust centralized logging" system for regular monitoring of anomalous behavior.



How to protect yourself from GCR:
  • Be careful about clicking on links or opening attachments in emails or messages from unknown senders, even if they appear to be from Google Calendar.
  • Do not share your Google Calendar credentials with anyone.
  • Keep your Google Calendar account up to date with the latest security patches.
  • Use a strong password and enable two-factor authentication for your Google Calendar account.

Comments

  1. Data & StatisticsNovember 12, 2023 at 11:45 AM

    The discovery of this new hacking method is a reminder that even trusted services like Google Calendar can be abused by hackers. It is important to be vigilant and take steps to protect your account.

    ReplyDelete

Post a Comment

Popular posts from this blog

YouTube's Secret AI Makeover: Innovation or Overstep? Why Creators Are Furious

By Shakir Bukhari
Image
  If you’ve been uploading YouTube Shorts lately and something about your video looks… different, you’re not imagining things. YouTube is facing a wave of backlash after it was revealed that the platform has been   secretly applying AI-driven enhancements to Shorts videos without creators’ consent . While the intent may have been to improve video quality and optimise playback, the lack of transparency has creators furious and for good reason. This controversy has sparked a heated debate about  AI ethics, creative control, and the future of content authenticity . Let’s break it down. What’s Actually Happening? Over the past few weeks, creators have begun noticing subtle yet noticeable changes in their Shorts after upload. Videos appeared sharper, colours more vibrant, and even faces slightly smoother. These tweaks weren’t part of the original upload; they were  automated AI enhancements applied by YouTube . According to YouTube, the experiment includes: Upscaling reso...
Read more

ChatGPT’s New Unified View: Voice, Live Transcripts & Maps — Speak, See, and Scan in One Chat

By Shakir Bukhari
Image
  OpenAI has reshaped how we talk to AI: ChatGPT now blends voice, live transcripts, and visual outputs (like maps and images) directly inside the regular chat window. That means you can speak naturally, watch a running transcript appear, and see interactive visuals, all inside the same conversation thread. This update cuts friction, boosts accessibility, and moves ChatGPT closer to a true multimodal assistant. Why this matters This change removes the old “voice-only” silo where audio lived on a separate screen. Now, voice input and audio responses live alongside the chat history and any visuals the model produces, so follow-ups, maps, and previous context are always visible while you talk. For practical tasks (directions, travel planning, hands-free research), that continuity is a big usability win. Compatibility & availability Platforms: The integrated voice experience is rolling out across mobile (iOS and Android) and the web. Rollout timing: The update began rolling out in ...
Read more

Google Confirms Gmail Spam Filter Glitch: Why Your Inbox Is Flooded and How to Fix It

By Shakir Bukhari
Image
  I f you woke up recently to a "Primary" inbox overflowing with promotional ads, newsletters, and suspicious spam that usually stays tucked away in the shadows, you aren’t alone. In what has become one of the most significant technical disruptions for the platform in recent years, Google has officially confirmed a widespread Gmail filtering issue causing chaos for millions of users worldwide. For a service that prides itself on using advanced AI to shield users from digital clutter, this sudden "spam-pocalypse" serves as a stark reminder of how much we rely on silent algorithms to keep our digital lives manageable. What was once neatly organised into Primary, Promotions, and Spam tabs suddenly turned into a Wild West of misclassified messages, sparking frustration and raising serious questions about the reliability of automated email systems. What’s Going Wrong With Gmail? The issue isn't a total outage; users can still send and receive mail, but the "brai...
Read more