Yes, you read that correctly.
In the ever-changing spam landscape, a Trend Micro customer forwarded this interesting spam to us today [above], a spam informing the recipient that they have been selected (!) to receive funds pursuant to “…payment of the foreign contractor’s debts…” in the form of an ATM payment card.
Apparently spammers are continuing to successfully sucker people into these bogus offers, but this is the first time we’ve seen them use the Google Calendaring system to request a meeting with the recipient.
Obviously, all sorts of Bad Things could result in accepting these offers, adding them to your Google (or other) calendaring systems as an appointment, etc., including the possibility of executing malicious code or other malware.
So, as we add these sorts of spams to our blocking databases (as we have done), please be sure to delete any similar ones that you may get in your inbox.
“Fergie”, a.k.a. Paul Ferguson
Network Security Intelligence
Advanced Threats Research