---
title: "Microsoft and Google Team up to Phish You | Phish Protection"
description: "Microsoft and Google Team up to Phish You: When hackers go after you with phishing emails, you"
image: "https://phishprotection.com/og/blog/microsoft-and-google-team-up-to-phish-you.png"
canonical: "https://phishprotection.com/blog/microsoft-and-google-team-up-to-phish-you/"
---

Quick Answer

You'll never guess which popular Calendar app was used to phish Gmail users earlier this year.\[ Google Calendar\](/blog/how-to-stop-spam-from-ending-up-in-google-calendar/). For a long time now, \_Google Calendar has had a major flaw\_. If someone sends an event request to your Gmail account, it automatically assumes you want to go and adds it to your calendar. It does so even if the event request is an attempt to phish you.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fmicrosoft-and-google-team-up-to-phish-you%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Microsoft%20and%20Google%20Team%20up%20to%20Phish%20You&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fmicrosoft-and-google-team-up-to-phish-you%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fmicrosoft-and-google-team-up-to-phish-you%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fmicrosoft-and-google-team-up-to-phish-you%2F&title=Microsoft%20and%20Google%20Team%20up%20to%20Phish%20You "Share on Reddit") [ ](mailto:?subject=Microsoft%20and%20Google%20Team%20up%20to%20Phish%20You&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fmicrosoft-and-google-team-up-to-phish-you%2F "Share via Email") 

![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/10/phishing-prevention-best-practices-8346.jpg) 

_When hackers go after you with phishing emails, you’ll never guess which brand they impersonate the most_.[ Microsoft](https://www.techrepublic.com/article/hackers-impersonate-these-10-brands-the-most-in-phishing-attacks/). “Given the ubiquity of Windows and Office, as well as other services including the Outlook.com webmail service and Xbox Live, Microsoft’s position at the top of the list should come as no surprise.”

You’ll never guess which popular Calendar app was used to phish Gmail users earlier this year.[ Google Calendar](/blog/how-to-stop-spam-from-ending-up-in-google-calendar/). For a long time now, _Google Calendar has had a major flaw_. If someone sends an event request to your Gmail account, it automatically assumes you want to go and adds it to your calendar. It does so even if the event request is an attempt to phish you.

_Microsoft and Google. Two big brands frequently used by hackers to phish victims_. It should come as no surprise then that hackers have figured out a way to use both companies in their latest phishing exploit.

![Phishing prevention best practices](https://media.mailhop.org/phishprotection/images/2019/10/phishing-prevention-best-practices-8346.jpg) 

“A new **phishing campaign** uses Google search query redirects to send potential victims to a phishing landing page designed to collect Microsoft Office 365 credentials via encoded URLs,” according to[ Bleeping Computer](https://www.bleepingcomputer.com/news/security/microsoft-phishing-attack-uses-google-redirects-to-evade-detection/).

“The phishers behind these attacks use URL encoding, _a technique that makes it possible to convert ASCII characters in URLs with % signs followed by two hexadecimal digits_. This allows the threat actors to hide the **phishing page URL** from secure email gateways (SEG) that scan emails for malicious links and content to block potentially dangerous messages.”

This is a challenging exploit because the first line of defense against **phishing attacks** is URL and domain checking. Any defense you intend to use will have to go beyond just basic URL and domain checking and will actually have to evaluate the phishing page itself to be effective.

![Phishing attack prevention](https://media.mailhop.org/phishprotection/images/2019/10/phishing-attack-prevention-8346.jpg) 

To protect yourself and your employees from exploits like this, you’re going to need a cloud-based [email security service](/) with real-time **link click protection**. _A service that not only checks the linked-to website when the email arrives, but checks it every time the link is clicked_.

To protect yourself and your employees from exploits like this, you’re going to need[ Phish Protection](/). In addition to real-time link click protection, Phish Protection comes with Smart Quarantine Protection, display name spoofing protection, domain name spoofing protection and malicious attachment blocking.

Phish Protection only costs pennies a day per employee, sets up in 10 minutes and comes with live 24/7 customer support. Get let Microsoft and Google team up to take you down.

## Topics

[ Phishing ](/tags/phishing/) 

![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Protect your inbox from phishing attacks

Real-time email security with 60-day free trial. No credit card required.

[Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) 

## Related Articles

[  Foundational 5m  0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks  Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[  Foundational 4m  13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization  Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[  Foundational 4m  All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center  May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[  Foundational 4m  2021 Phishing Trends You Need To Be Wary Of  Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Microsoft and Google Team up to Phish You","description":"Microsoft and Google Team up to Phish You: When hackers go after you with phishing emails, you'll never guess which brand they impersonate the most .","url":"https://phishprotection.com/blog/microsoft-and-google-team-up-to-phish-you/","datePublished":"2019-10-02T08:47:49.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-10-02T08:47:49.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/microsoft-and-google-team-up-to-phish-you/"},"articleSection":"foundational","keywords":"Phishing","wordCount":423,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/10/phishing-prevention-best-practices-8346.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"Microsoft and Google Team up to Phish You","item":"https://phishprotection.com/blog/microsoft-and-google-team-up-to-phish-you/"}]}
```