ALERT: Nasty New Email Using ‘Google Docs Scam’ To Hack Your Computer

Freeport News Network — Google says it has stopped a phishing email that reached about a million of its users. A sinister email is making the rounds in which the sender—someone you know, in some cases—invites you to click on a Google Docs link. People who click on the link can get pulled into a world of trouble so, first things first, do not click the link. Just delete the email.

The nasty new email, which appears aimed at journalists, began to surface on Wednesday. Users who clicked a link and followed instructions, risked giving the hackers access to their email accounts. The scam claimed to come from Google Docs – a service that allows people to share and edit documents online.

Google said it had stopped the attack “within approximately one hour”, including through “removing fake pages and applications”.

“While contact information was accessed and used by the campaign, our investigations show that no other data was exposed,” Google said in an updated statement.

“There’s no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup.”

During the attack, users were sent a deceptive invitation to edit a Google Doc, with a subject line stating a contact “has shared a document on Google Docs with you”.

The email address hhhhhhhhhhhhhhhh@mailinator[.]com was also copied in to the message; Mailinator, a free email service provider has denied any involvement.

If users clicked on the “Open in Docs” button in the email, they were then taken to a real Google-hosted page and asked to allow a seemingly real service, called “Google Docs”, to access their email account data.

By granting permission, users unwittingly allowed hackers to potentially access to their email account, contacts and online documents.

The malware then e-mailed everyone in the victim’s contacts list in order to spread itself.

“This is a very serious situation for anybody who is infected because the victims have their accounts controlled by a malicious party,” Justin Cappos, a cyber security professor at NYU, told Reuters.

According to PC World magazine, the scam was more sophisticated than typical phishing attacks, whereby people trick people into handing over their personal information by posing as a reputable company.

This is because the hackers bypassed the need to steal people’s login credentials and instead built a third-party app that leveraged Google processes to gain account access.

The Russian hacking group Fancy Bear has been accused of using similar attack methods, but one security expert doubted their involvement.

“I don’t believe they are behind this… because this is way too widespread,” Jaime Blasco, chief scientist at security provider AlienVault, told PC World.

Google said the spam campaign affected “fewer than 0.1%” of Gmail users. That works out to about one million people affected.

Last year, an American man plead guilty to stealing celebrities’ nude pictures by using a phishing scam to hack their iCloud and Gmail accounts.

And in 2013, Google said it had detected thousands of phishing attacks targeting email accounts of Iranian users ahead of the country’s presidential election.

++

Like This? Buy us a coffee while we are out and about covering local news. Support independent local news.

Leave a Reply

Your email address will not be published. Required fields are marked *

Hurricane Maria Live Updates: Puerto Rico Loses Power and Sets a Curfew

New York Times - 3 hours ago
Hurricane Maria reached Puerto Rico as a powerful...

Mueller Seeks White House Documents Related to Trump's Actions as President

New York Times - 4 hours ago
Robert S. Mueller III, the special counsel, at...

In Mexico City, rich and poor had little in common. Until the earthquake hit.

Washington Post - 2 hours ago
MEXICO CITY — On one of Mexico City's...

Ready to deal this time? Alaska's Murkowski is in the health-care spotlight. Again.

Washington Post - 1 hour ago
Lisa Murkowski walked briskly down a cavernous...

Melania Trump condemns bullying at UN luncheon

Politico - 6 hours ago
First lady Melania Trump on Wednesday called on...

News via Google. See more news like this

Being happy never goes out of style. Click Here