Google Calendar Has A Dangerous Malware Threat: What Is It And How It Attacks

News18

30-05-2025

Last Updated:
Google malware threats are getting wilder but the Calendar app being the ruse to attack businesses is a new method on the check list.
Hacker groups are now eyeing your Google Calendar to bypass the device security and steal information. They have devised a dangerous malware called TOUGHPROGRESS that primarily targets government websites and holds them to ransom in exchange for giving them back the access.
This is not the first sighting of the malware, and the Google Threat Intelligence team claims the first incident of the APT41 hacking group was reported back in October 2024. Now, the same group is exploiting the Calendar app to breach the system defenses and attack the victims.
The details from the cyber security group at Google suggests the malware is directed at targeted systems using the conventional phishing email method. The group sends the pointed email with the objective to get the victim to open the affected website where the malicious ZIP file with PDF and fake images triggers the malware into action.
And once the TOUGHPROGRESS malware bypasses all the checks, it tries to access the Calendar app of the victim to not only steal data but take control over the system by sending commands. The fake Calendar app also creates events with data embedded into them.
This isn't the first Google product to be targeted by the hacker group. The APT41 group used Google Drive to inflict similar attacks on government entities using Google Sheets and more.
Not In Danger
Google has strong advice for people to avoid falling prey to these attacks:
Expect more details from Google once the severity and impact of the malware campaign is addressed and rectified.
First Published: