Google blocks fast-moving fake Google Docs scam

Google says it’s disabled the accounts sending out a convincing fake Google Docs invitation in a widespread phishing scam that hit inboxes around the world yesterday.

“We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts,” Google said in an official statement. “We’ve removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again. We encourage users to report phishing emails in Gmail.”

Invitation - Google Docs phishing scam
Members of the ITWC team received examples of this widespread phishing scam in their inbox on Wednesday.

The phishing attempt was extremely convincing as it looked like an invitation that shared a Google Doc from someone in your contact list. In emails received by members of the IT World Canada staff, the filenames referenced were also convincing. Clicking on the invitation led to a real Google account selection screen. After that’s selected, the app called “Google Docs” asks for a series of permissions. This is where a savvy user that’s paying attention would see a red flag, since Google Docs doesn’t require permissions, as it’s native to Google. If the user agrees, the scam is replicated to the user’s contact list.

Affected users should revoke access to the fake Google Docs app and follow-up with any contacts that sent you the phishing email to let them know they’ve been compromised. The attack would give hackers full access to the contents of your email.

In a statement provided to TNW, Google says it estimates 0.1 per cent of Gmail users were affected. It stopped the phishing campaign within one hour of its launch.


Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

Brian Jackson
Brian Jackson
Editorial director of IT World Canada. Covering technology as it applies to business users. Multiple COPA award winner and now judge. Paddles a canoe as much as possible.

Featured Story

How the CTO can Maintain Cloud Momentum Across the Enterprise

Embracing cloud is easy for some individuals. But embedding widespread cloud adoption at the enterprise level is...

Related Tech News

Get ITBusiness Delivered

Our experienced team of journalists brings you engaging content targeted to IT professionals and line-of-business executives delivered directly to your inbox.

Featured Tech Jobs