In an unexpected plot twist, hackers have set their sights on Google Calendar, turning our trusty scheduling tool into a playground for cyber mischief. According to a report by TechRadar, hackers have discovered a method to use Google Calendar as a command and control (C2) infrastructure. The digital villains of today face a challenge: getting malware on an infected endpoint to follow their nefarious commands. The traditional route involves compromised servers as C2 infrastructure. But cybersecurity pros are quick on the draw, often discovering and terminating these connections in no time. Enter the cunning hacker solution: use legitimate resources like Google Calendar, making it much harder for the good guys to detect the attack and cut the connection. Google has issued a warning about a proof-of-concept (PoC) exploit known as “Google Calendar RAT” (GCR), which is currently making the rounds on the dark web. This exploit, the brainchild of an individual known as MrSaighnal, creates a “covert channel” by exploiting the event descriptions in the calendar. When a device is infected with GCR, it will periodically check the Calendar event description for new commands and execute them. It then updates the event description with the command output. While there haven’t been any reported instances of GCR being exploited in the wild yet, it’s likely only a matter of time. Hackers are increasingly turning to legitimate cloud services as vehicles for their malware Google Docs, for example, has a share feature that allows users to type an email address in the…Your Google Calendar might be the next target for hackers