Warning: Calendly Phishing Pages Are Targeting Job Seekers

Researchers at Malwarebytes warn that a phishing campaign is using spoofed Calendly pages to trick users into handing over their Facebook and Google account credentials. After this, the user is taken to a spoofed Facebook or Google login page designed to steal their credentials and intercept their multifactor authentication codes. “While the visitor is on the page, it keeps checking in with the attackers’ server and waits to be told which screen to show next,” the researchers write.

Published 22-Oct-2026 16:57 UTC · First seen 22-Oct-2026 16:56 UTC

Sources

• KnowBe4 Blog · 22-Oct-2026