Google warns of phishing scam that impersonates Google Docs

Alphabet Inc said on Wednesday it was investigating widespread reports about a spam campaign in which recipients received emails from known contacts that asked them to click on a link to review a Google Docs document.

Google was quick to address the problem, but for users who were victimized by the attack, you will need to protect yourself with extra precautions. If the user grants permission to the app, nothing happens. "We've removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again", the report quoted Google as saying. There you will find a list of all the apps that have account access.

So the best thing you can do is delete the email unless you can guarantee it is from the person who sent it.

In some way the scheme is similar to one we warned you about back in January. While traditional phishing attacks launched on Google's services take users to a fake Google page that tries to collect passwords, this new attack works within the confines of the Google system, but takes advantage of the fact that a non-Google app can be given any name that the creator chooses.

Google said it was able to stop the campaign in about an hour.

Hackers created a malicious app and named it "Google Docs", which looked trustworthy. However, a significant number of users may have already been victimized within that short period of time. If you've clicked the link in the malicious email, you can revoke the attacker's access by visiting myaccount.google.com/permissions and deleting the "Google Docs" app - which is the one pretending to be legitimate.

Google did not respond for requests to comment beyond its tweet and other security experts said that victims should remove the hackers from their accounts as soon as possible.

The attack can bypass two-factor authentication, so having that additional layer of security enabled won't help you.

Related:

Comments

Latest news

Trump says he's willing to consider raising gas tax
I can give you 30 million reasons, one for each dollar the AMT required Trump to pay on more than $150 million. The gas tax is one of the few taxes that enjoy support from the businesses that bear the cost of paying them.

US needs September 'shutdown' to fix Senate 'mess'
Mulvaney said he'd been barraged with questions over why the bill was bipartisan, given the sole GOP control of Congress. Also, insurers would be able to charge higher premiums to those with medical issues if they let their coverage lapse.

Hulu launches live TV streaming service
For $40/month, Hulu's live TV streaming service includes their existing streaming library, making it a very tempting purchase. We look forward to getting our hands on Hulu with Live TV to share our insights on where it stands among the competition.

Tornadoes, flooding kill 6 in parts of South, Midwest
Missouri Governor Eric Greitens said over 30 rescues have been conducted and some residents have been told to evacuate. Canton Mayor Lou Ann Everett told WFAA-TV on Monday that widespread debris makes access hard to some residential areas.

Other news