Google Docs phishing scam doused after catching fire

May 4, 2017
A Google spokesperson said action had been taken to protect users against a 'phishing' scam email impersonating Google Docs

A 'phishing' scam that tricked people with what appeared to be Google Docs links was doused by the internet giant after spreading wildly.

The purpose of the scam, and the culprits behind it, remained unknown late in the day.

"We have taken action to protect users against an impersonating Google Docs, and have disabled offending accounts," a Google spokesperson said in an email response to an AFP inquiry.

"We've removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again."

The scam combined "a and a worm," using a deceptive email to get people to open the door to malicious code that wriggled into their messaging programs to spread itself to others, according to Electronic Frontier Foundation staff technologist Cooper Quintin.

Email sent from a known contact's real address would arrive containing a link it claimed led to a file to be shared at Google Docs online service, according to a rundown of the chicanery.

Clicking the link led to a real Google web address and asked for authorization to run an application the attacker had cleverly called 'Google Docs.'

Permissions granted to the application included allowing it to read or send email on a person's behalf.

"It doesn't immediately look like a phishing email," Quintin said.

"When you authorize the app, the very next thing it does is send the same emails to everyone in your contacts."

The application, along with online domains it was connecting to, were disabled within hours of it starting to spread wildly, according to Quintin.

"I suspect that it was far more successful than whoever released it into the world hoped or expected, and was maybe undone by its own success," he said.

"The domains went down pretty quickly. Google disabled the app, so it is no longer a threat."

The campaign affected fewer than a tenth of a percent of Gmail users, and was stopped within an hour, according to the California-based internet powerhouse.

Gmail is reported to have more than a billion users.

Google determined that while contact information was accessed, no other data was gleaned by the ruse, according to the spokesperson.

Explore further: Android malware steals million Google accounts: researchers

Related Stories

IRS warns firms, beware of phishing email scam

February 27, 2017

The IRS is warning employers about a spreading phishing email scam whose targets include companies and that seeks to get employees' Social Security numbers and other information.

Google April Fool's prank boomerangs

April 1, 2016

Google is acknowledging that it pranked itself after an April Fool's Day Gmail tweak angered some people who use Google's email for work.

Recommended for you

Chinese fans trash blackout as Google AI wins again

May 25, 2017

Chinese netizens fumed Thursday over a government ban on live coverage of Google algorithm AlphaGo's battle with the world's top Go player, as the programme clinched their three-match series in the ancient board game.

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.