Reply
 
Thread Tools Display Modes
Old 05-04-2017, 07:33 AM   #1
Site Team - Lou
 
Herk7769's Avatar
 
Join Date: Oct 2009
Location: South Eastern PA
Posts: 22,295
Google Docs Phishing Scam

Google Phishing Scam

This is a VERY BAD scam. Be aware and DELETE without opening if you get this invitation to open a Google Doc File.
__________________

__________________
Lou, Laura, & Freya the wonder dog
2008 GMC Sierra 3000HD Crewcab SB Allison Duramax
2019 Flagstaff 8529FLS - Pullrite 3300
HAM CALLSIGN - KC3FFW
Herk7769 is offline   Reply With Quote
Old 05-04-2017, 09:23 AM   #2
Site Team
 
wmtire's Avatar
 
Join Date: Nov 2010
Location: Northeast Louisiana
Posts: 20,180
Here is the text of an article about it. I know it's kinda scary to be told not click on something, then have to click on something to read it.

Google says it has stopped a phishing email that reached about a million of its users.

The scam claimed to come from Google Docs - a service that allows people to share and edit documents online.

Users who clicked a link and followed instructions, risked giving the hackers access to their email accounts.

Google said it had stopped the attack "within approximately one hour", including through "removing fake pages and applications".
"While contact information was accessed and used by the campaign, our investigations show that no other data was exposed," Google said in an updated statement.

During the attack, users were sent a deceptive invitation to edit a Google Doc, with a subject line stating a contact "has shared a document on Google Docs with you".

The email address hhhhhhhhhhhhhhhh@mailinator[.]com was also copied in to the message; Mailinator, a free email service provider has denied any involvement.

If users clicked on the "Open in Docs" button in the email, they were then taken to a real Google-hosted page and asked to allow a seemingly real service, called "Google Docs", to access their email account data.

"There's no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup."

By granting permission, users unwittingly allowed hackers to potentially access to their email account, contacts and online documents.
The malware then e-mailed everyone in the victim's contacts list in order to spread itself.
"This is a very serious situation for anybody who is infected because the victims have their accounts controlled by a malicious party," Justin Cappos, a cyber security professor at NYU, told Reuters.

'Too widespread'

According to PC World magazine, the scam was more sophisticated than typical phishing attacks, whereby people trick people into handing over their personal information by posing as a reputable company.

This is because the hackers bypassed the need to steal people's login credentials and instead built a third-party app that used Google processes to gain account access.

The Russian hacking group Fancy Bear has been accused of using similar attack methods, but one security expert doubted their involvement.
"I don't believe they are behind this... because this is way too widespread," Jaime Blasco, chief scientist at security provider AlienVault, told PC World.

Google said the spam campaign affected "fewer than 0.1%" of Gmail users. That works out to about one million people affected.
__________________

__________________
2011 Flagstaff 831 RLBSS

Never Apologize! Never Explain!
Sorry, thatís my motto.
wmtire is online now   Reply With Quote
Old 05-04-2017, 12:59 PM   #3
Junior Member
 
Join Date: Feb 2017
Posts: 28
We got hit at the school I teach in yesterday. I received a Google doc from a family member, or so I thought. When it wouldn't open I knew something was wrong but it was too late. The virus bounced from Google account to Google account in a matter of minutes. Luckily our tech department got on it quick and slowed it down until Google could take care of it. It's going to be a while until I open any Google docs!
TMMull is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



» Featured Campgrounds

Reviews provided by


Disclaimer:

This website is not affiliated with or endorsed by Forest River, Inc. or any of its affiliates. This is an independent, unofficial site.




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 09:33 PM.