Google Docs Hit by Phishing Attack

Google Docs Hit by Phishing Attack

Don't edit that Google Doc, at least not today.

If someone invites you to edit a file in Google Docs, be careful opening it as it may be a sophisticated phishing scheme out to get your credentials.

As detailed on many websites since the attack started on the afternoon of May 3rd, the attack sends targets an emailed invitation from someone they may know, takes them to a real Google sign-in screen then asks them to "continue to Google Docs." But this grants permission to a third-party web app that has just been named "Google Docs." This gives the hacker access to your email and your address book.

This phishing scheme is different from others in that it works within the Google system. It takes advantage of the fact that you can create a non-Google web app with a misleading name.

If you have clicked the app, it may have already spammed everyone in your address book by you can revoke future access by going to Google's Connected Apps and Sites page, where you can remove access from "Google Docs." Also, it may be a good idea to change your password.

Featured

New Products

  • Theia Technologies building fisheye

    Theia Technologies Linear Optical Technology®

    Learn how ultra-wide, zero-distortion rectilinear lens design improves spatial accuracy and eliminates the need for software de-warping in real-time robotic and automation systems.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Squire Vulcan Combination Padlocks

    Squire Locks USA Vulcan™ Resettable Combination Padlocks

    Stop competing with flimsy, retail-grade hardware—Squire's professional-grade resettable padlocks deliver heavy-duty boron steel shackles and front-facing dials for rugged outdoor environments.