Google warns of phishing scam that impersonates Google Docs

We encourage users to report phishing emails in Gmail.

Internet users everywhere are being spammed with what appear to be malicious invitations to log on to their Google accounts.

"We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts", a Google spokesperson told Threatpost.

The attack used a relatively novel approach to phishing, a hacking technique created to trick users into giving away sensitive information, by gaining access to user accounts without needing to obtain their passwords.

Users are asked to click on the link, which ultimate gives the hackers behind the attack access to the contents of their Google accounts, including email, contacts and documents. Do not click the link. The app accesses all your contacts and sends them a similar fate. When the reset emails arrive, the malware can then respond to them and delete the message before you even see it, giving hackers control of your online identity.

Popular Telugu TV actor Pradeep Kumar kills self in Hyderabad
The Hyderabad police have filed a suicide case and are probing Pradeep's family members and friends. Pradeep is known for having worked in several serials, including Saptha Matrika , and a few movies.

Le Pen visits French factory, Macron wins ally before runoff
Jean-Marie Le Pen is holding the Joan of Arc event again, a march his daughter wants nothing to do with. The Harris Interactive poll places Mr Macron on 61 per cent and Ms Le Pen on 33 per cent.

Opponents: PA Bill Would Defund Planned Parenthood
Planned Parenthood claims abortion makes up "only 3 percent" of its services. "It's a personal view for me", he said. Pennsylvania Governor Tom Wolf has vowed to veto the bill if it reaches his desk.

The To: address is "hhhhhhhhhhhhhhhh@mailinator.com".

If you've recently received a Google Docs email from a contact that you know, you might want to clarify with them if they really sent it to you.

"This is a very serious situation for anybody who is infected because the victims have their accounts controlled by a malicious party", said Justin Cappos, a cyber security professor at NYU Tandon School of Engineering.

Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation, says anyone who clicked on the link should check their Google App permissions and remove the one called "Google Docs". Many of those domains have been taken down; Google also quickly updated Safe Browsing and Gmail with warnings about the phishing emails and attempts to steal personal information.

Google is working to address the issue.

Related news