TANGLED

Summary from the TLDR InfoSec newsletter

Tangled is a phishing platform that weaponizes iCalendar rendering features in Microsoft Outlook and Gmail to automatically add spoofed meeting invites to targets' calendars without user interaction. The tool automates the delivery of social engineering campaigns and runs as Docker containers, with a web-based dashboard for managing phishing operations. Red teams can use this to test an organization's susceptibility to calendar-based phishing attacks that bypass traditional email security controls.