Have you started seeing strange appointments or reminders in your iPhone’s calendar app? If so, you might be worried that your calendar has a virus or that you’ve been hacked. In fact, what’s probably happened is that you have been subscribed to a third-party calendar which is generating spam appointments. It’s essential you don’t click on any links within these appointments, since they could lead to malicious websites which infect your device and steal your information. To find out why you’re getting these notifications and how to remove them, read on.
The terms ‘iPhone calendar virus’, ‘iOS calendar virus’ and ‘app calendar malware’ all refer to Apple OS spam that adds fake subscribed calendar accounts to a user’s device without their approval. Affected devices could be iPhones, Mac computers or iPads. As a result of the spam, users receive notifications for events which contain suspicious or malicious links. These bogus events often contain alarming headlines and urge you to click on the links. Example messages might include:
Sometimes, the notifications are more sales or prize-focused:
These messages are designed to provoke curiosity and a sense of urgency. They want to entice you into clicking through to explore what is being promoted. However, clicking through usually triggers a website script that delivers malware to your device or takes you to various phishing pages . Don’t click or tap these links and avoid responding to an event by clicking accept, decline, or maybe, since doing so lets the sender know your account is active.
What makes bogus events, invitations, and appointments so annoying is their sheer quantity. In some cases, they can arrive several times an hour. Audio alerts can be especially intrusive if you have them enabled.
iPhone default settings allow users to receive calendar invites from anyone, even if they are not in your contact list, which makes it easy for spammers to infiltrate your calendar. Spammers and hackers know that most people don’t expect spam in their calendar, so they are more likely to open it and less likely to be suspicious of the information and links it may contain. These could then be used to steal credentials and sensitive information or download adware or malware to your device.
Strictly speaking, an iPhone calendar virus isn’t really a virus, although it certainly feels like one when you’re being bombarded with unwanted and annoying spam notifications. The good news is that getting rid of iPhone calendar viruses is straightforward – as we explain later on in this article.
So, how do you end up receiving bogus calendar invites in the first place? Calendar viruses rely on a combination of social engineering and malicious code. Here are the main ways you can fall victim to one:
Attackers have got hold of your email address
If a spammer knows the email address associated with your calendar account, they can send you deceptive calendar invites which contain infectious hyperlinks. It’s relatively easy for spammers to get hold of your email address – this can happen if:
Apple’s Calendar app is configured to allow anybody to send you calendar invitations by default. It is designed to be easy for members of the Apple user community to interact with each other. A drawback of this openness is that malicious actors may obtain user credentials, possibly from the dark web in the aftermath of a data breach, and then orchestrate a spam campaign featuring fake event descriptions which contain phishing links.
You inadvertently clicked on a malicious link
You might also be tricked into subscribing to a calendar on suspicious websites. Fake calendars can sometimes be disguised as captchas. Captchas are the simple puzzles which websites ask you to complete to prove you are not a bot. Sometimes scam websites display fake captchas designed to bypass warnings from your browser and make you press certain keys that trigger malicious downloads. In these cases, clicking the “I’m not a robot” box, or anywhere else on the page, can trigger a prompt to subscribe to a calendar. To trick you, the calendar name is blanked out. If you are rushing to get through the captcha process, you might click OK. Now the criminals can send you bogus calendar events containing suspicious links.
Receiving a spam link by text message
You may receive a spam text – for example, a delivery spam message asking you to track a parcel and providing a link. As soon as you click on it, you end up subscribing to a calendar that fills your iPhone with appointments for things like critical threats and other warnings.
Apple’s products are interlinked, so if you receive spam in your iPhone calendar, it will most likely appear on your other Apple devices too. The following tips should help you get rid of calendar spam on your iPhone, iPad, Mac and anywhere else.
To clear your device from malicious calendar attacks, you need to complete several removal steps. Since you may have signed into your iCloud with the same Apple ID on all your devices, you may need to check and clean all of them.
For newer iPhones:
This should be sufficient to stop the fake appointments and reminders from appearing on your calendar.
For older iPhones:
For your Mac:
Follow these tips to minimize the risk of malware on your iPhone calendar or calendar viruses:
Block pop-ups in Safari
On your iPhone or iPad, go to Settings > Safari and turn on Block Pop-ups and Fraudulent Website Warning. On your Mac, you can find these options in Safari > Preferences. The Websites tab includes options to block some or all pop-up windows, and you can turn on Fraudulent Websites Warnings within the Security tab.
Be careful where you click
Avoid clicking or tapping on links or opening attachments in unknown text or email messages. Additionally, be careful when interacting with captchas. If you do receive a fake calendar notification, don't interact with the appointments in any way other than to delete them. Never click on any links or other active sections of the appointments. If the appointment arrived via a text in the Messages app, delete it by swiping from right to left and choosing Delete. Your iPhone may ask if you want to Report Junk, in which case it’s a good idea to do so.
Review and change your calendar settings
One of the best ways to minimize calendar spam is by preventing notifications. It is also sensible to ensure that none of your devices are set up to auto-accept calendar invites. Although this setting can be convenient for busy people, it can be used as a vulnerability to insert unwanted spam into your calendar. To change your calendar settings:
Be selective about sharing your email address
Since anyone with your email address can send you calendar invites, think carefully about who you share your address with. You may want to create a ‘burner’ email address to be used for sharing. This will not be connected to your primary account and therefore spam will go there rather than clogging up your day-to-day emails.
Use a VPN
Using a VPN can enhance your security. Kaspersky VPN Secure Connection is designed to work well on iPhones and iPads and encrypts your data while browsing, so nobody can intercept data that you send or receive.