Attackers leverage the fact that many email and calendar platforms (like Microsoft Outlook and Google Calendar with default settings) are configured to automatically add external event invitations to a user’s calendar.