Spammers adding events to my outlook calendar

Steps to Force Microsoft Tech Support to See Unblockable Calendar Spam (Spoofed Domains) 

I have been sending this to Microsoft help feedback every day for almost two weeks. Spammers are using a backend Outlook exploit to force malicious calendar adds into our accounts using hidden, disguised, and spoofed domains (like @groupsoutlook.com or @zoomgroups.com). Standard blocking fails, but I have found a sequence that forces Microsoft's technical support to view the telemetry. 

Here is the exact order of operations to record and report this bug: 

1. Clean your Junk folder: First, go through your routine junk emails and report them all as Phishing. Do not leave this step out; you want to report all standard junk so that your folder clears down to only the malicious calendar-creation spam emails. 
2. Open the Feedback ticket: Go to the Help menu at the top and select Feedback. 
3. Paste the event description: In the feedback issue/concern box, paste the calendar event description text (which I will paste below or a similar report). 
4. Initiate the screen recording: Click the built-in Record button. When the box opens asking which window you want to share with Microsoft, select your Junk folder window. 
5. Capture the Junk folder telemetry: Let it record your Junk folder window for about 5 to 10 seconds. 
6. Capture the Calendar exploit: While still recording, immediately switch over to your Outlook Calendar. Select Show All, and then click on your calendars and uncheck your regular Outlook calendar. This specific step hides your clean schedule and forces all the malicious calendar adds onto the screen, recording them directly for the Microsoft team to analyze. 
7. Submit diagnostics: Ensure the radio buttons for "Use diagnostic data" and "You can contact me" are both set to Yes, then hit submit. 

Then report this as phishing spam. Next, find the newly created calendar: go to your calendar dropdown and select "Show All." I then click on each malicious calendar, open each one, and click on the oldest event from that sender (the first string of events). Look for the sender's name in the small window that opens. You have to do this for each one and click on the sender—it is located in the middle of the pop-up window you are currently in. For example, I see the name "Linda Taylor." Clicking on it reveals "******@groups.outlook.com". 

Then, click on the three dots (...) at the top of the pop-up window, select "Give feedback on member," and paste the same message below (or your own custom version). Next, down from the top, select "Member Overview" or "Other." I don’t know if it matters; I just select "Member" because I am trying to point them to the malicious actors breaking the Microsoft Outlook backend. Paste the comment into the box again, select the radio buttons for "Yes, share" and "Yes, you may contact me." 

I am hoping that if we bombard Microsoft with enough reports of the same issue both ways—and with enough users doing it—they will finally fix it, as the Microsoft Support Group comments and follow-ups have been fruitless so far. 

Once you complete that, go back and start the sequence over in the group calendar you opened. Find the newly created calendar, click on each malicious calendar to open it, click the oldest event from that sender (the first string of events), click the sender's name in the small window that opens, go to the three dots (...) at the top, click to open them, and select "Leave the group." The calendar will now disappear from your Calendars. 

The main issue is that these malicious bots and scammers are creating new events every single day, so we have to report heavily using this method to force Microsoft to fix the Outlook program backend vulnerabilities. It's driving me crazy. 

I paste the below comments in every report issue or concern report and diagnostic input to Microsft. You can feel free to change or cusotmize however we need to make is issue apparent by many user. This has taken up so much time as there are little resources on this subject that work at all..

                                                                                                                                                               __Subject__: Urgent Technical Support: Calendar Spam Exploit via Unauthorized External Invitations

To Microsoft Technical Support,

I am writing to formally report and request immediate technical resolution for a critical security vulnerability and abuse issue affecting Microsoft Outlook.

Issue Description:                                                                                                                                                     Spammers and malicious actors are exploiting Outlook's default handling of external calendar invitations. Unauthorized senders are injecting spam, fraudulent links, and phishing attempts directly into my Outlook calendar by sending unsolicited meeting invites. These events automatically appear on the calendar layout even before a user interacts with or accepts the invitation.

This exploit bypasses standard email junk filters by placing malicious content directly into the calendar interface, representing a severe breach of user security and a blatant exploitation of Microsoft’s infrastructure.

Requested Actions:

1. Account Review: Please review my account backend to ensure no unauthorized malicious protocols or rules are forcing these synchronization events.
2. Mitigation Guidance: Provide the precise configuration steps for this specific version of Outlook to completely disable the automatic processing and rendering of unaccepted external calendar invitations.
3. Exploit Escalation: Escalate this systemic calendar injection vulnerability to your security and engineering teams, as this specific exploit is widely documented across Microsoft Community help forums.

Thank you for your prompt attention to securing this vector. I look forward to your immediate assistance in resolving this configuration loop.

Sincerely,

So far hundred os report to Microsft help. Full wrtten details and slecting the recording option and moving from junk showing the spammer to the groups folder at the bottom of you folder scroll down on left(shows all those groups added) and theh sharing the malicious spam launched from junk as a trjan horse using @groups.outlook.com. You cannot block or rtestrict this new Outlook option. You cannot remove the groups folder. All you can do is block and remove these one by one. This is completle unaccepotable breach ny Microsft. What is the action taken by MS? None next what will we get worms or spyware injected through this totally unacceptable program developer explotation by bad actors which is completley an internal @groups.outlook.com programimg error on MS ??