Google Calendar: Now the hackers are eyeing your Google Calendar. A dangerous malware has surfaced called ToughProgress and its main target is to attack government websites and blackmail them. Using this malware, hackers take away the access of the system and then demand ransom in return.
Intelligence report
According to Google’s Threat Intelligence Team, this is not the first time that toughprogress has come in the discussion. The first incident related to this was reported in October 2024 when it was used by a hacker group named APT41. Now this group is trying to penetrate security systems by resorting to apps like Google Calendar.
How does this malware work in Google Calendar?
According to Google’s cyber security team, this malware is usually spread through fishing email. An email is sent to the victim which has a link to a suspicious website. As soon as the user opens that link, an ZIP file is downloaded which contains fake PDF and image files. Through these, malware is activated.
Once the toughprogress dodges the safety of the system, it makes access to Google Calendar. Then it makes fake events in the app and hides code or commands in them through which it tries to gain control over the system. APT41 Group has previously targeted government departments using platforms like Google Drive and Google Sheets. Now he has also included the Calendar app in his toolkit.
Vigilance needed
Google has confirmed that they are aware of this attack and the flaw associated with the Calendar app has been fixed. Institutions which were targeted have also been informed. However, Google has not been able to make it clear how much damage has been done so far.
Google advised
- Never open the email link or attachment of those who send unknown
- Always keep your system and software updated
- Use reliable cyber security tools
- Keep an eye on the access logs and suspicious activities of the system
Also read:
Now you will make selfie stylish! Fashion shopping from Glance AI so easy to forget to go out