M365 CalPhishing: External .ics Calendar Invite via groups.outlook.com

Ankit Mehta@Secvyn

•updated Jun 29, 2026•7•0•15

Detects phishing attempts using .ics (calendar) files that originate from the 'groups.outlook.com' domain, often used to deliver meeting invites that contain malicious links or social engineering lures.