iCloud Calendar invites are being exploited to send phishing emails that appear to be legitimate purchase notifications from Apple's email servers, thereby evading spam filters. These emails aim to trick recipients into believing their PayPal accounts have been charged fraudulently, leading them to call a scammer's support number for assistance. The phishing scheme leverages authentic email authentication methods, making the scams appear trustworthy.