Google Event Injection - Tradecraft Security Weekly 20
Nov 3, 2017 ·
13m 11s
![Google Event Injection - Tradecraft Security Weekly 20](https://d3wo5wojvuv7l.cloudfront.net/t_square_limited_480/images.spreaker.com/original/83224f94c7f77783e4d5a17366fdb7d9.jpg)
Download and listen anywhere
Download your favorite episodes and enjoy them, wherever you are! Sign up or log in now to access offline listening.
Description
Google provides the ability to automatically add events to a calendar directly from emails received by Gmail. This provides a unique situation for phishing attempts as most users haven't been...
show more
Google provides the ability to automatically add events to a calendar directly from emails received by Gmail. This provides a unique situation for phishing attempts as most users haven't been trained to watch their calendar events for social engineering attempts. In this episode Beau Bullock (@dafthack) and Michael Felch (@ustayready) show how to inject events into a targets calendar using MailSniper bypassing some security controls that Google has in place. Links: Blog Post: https://www.blackhillsinfosec.com/google-calendar-event-injection-mailsniper/
show less
Information
Author | Security Weekly |
Organization | Security Weekly |
Website | - |
Tags |
Copyright 2024 - Spreaker Inc. an iHeartMedia Company