I recently had this problem in an old Samsung phone. The spam was not directly coming from email, but from some other installed app which was somehow tricking S planner (Samsung's calendar app) into adding the events to google's calendar, even though the original spammer app had no calendar permissions.