

Once the victim clicks the link, they are taken to a fake Calendly landing page that presents a CAPTCHA, followed by an AiTM phishing page that attempts to steal visitors’ Google Workspace login sessions.
How is the phishing page able to steal the Google Workspace session? or do they mean it presents a fake login form to get username/password?














AKA creepio