# Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

Source: [The Hacker News](https://thehackernews.com/2026/11/calendar-invites-and-live-proxies.html) · 2026-11-12 · Security
Page: https://themorning.dev/story/calendar-invites-and-live-proxies-inside-a-google-session-hijacking-campaign-f7cf57082e209fd8
Kind: security · Impact: high

## In brief

- Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users.
- The campaign uses calendar invites and live proxies so that standard link checks come back clean.
- Threat Research at Material Security identified the campaign.

## Why it matters

Session hijacking bypasses passwords and can give attackers access to corporate Google accounts even when link inspection tools report nothing suspicious.

## Timeline

- 2026-08-15: Phishing operation begins stealing live Google sessions from corporate users (mid-August 2026, exact day not given in sources)
- 2026-11-12: The Hacker News publishes report on the campaign

## Coverage

- [Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign](https://thehackernews.com/2026/11/calendar-invites-and-live-proxies.html) — The Hacker News, 2026-11-12

Tags: phishing, session-hijacking, google, calendar, email-security

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev