Google Docs phishing scam doused after catching fire | Inquirer Technology

Google Docs phishing scam doused after catching fire

/ 11:26 AM May 04, 2017
FILE PHOTO OF Getty Images/AFP

FILE PHOTO OF Getty Images/AFP

A ‘phishing’ scam that tricked people with what appeared to be Google Docs links was doused by the internet giant after spreading wildly.

The purpose of the scam, and the culprits behind it, remained unknown late in the day.

ADVERTISEMENT

“We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts,” a Google spokesperson said in an email response to an AFP inquiry.

“We’ve removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again.”

FEATURED STORIES

The scam combined “a phishing attack and a worm,” using a deceptive email to get people to open the door to malicious code that wriggled into their messaging programs to spread itself to others, according to Electronic Frontier Foundation staff technologist Cooper Quintin.

Email sent from a known contact’s real address would arrive containing a link it claimed led to a file to be shared at Google Docs online service, according to a rundown of the chicanery.

Clicking the link led to a real Google web address and asked for authorization to run an application the attacker had cleverly called ‘Google Docs.’

Permissions granted to the application included allowing it to read or send email on a person’s behalf.

“It doesn’t immediately look like a phishing email,” Quintin said.

“When you authorize the app, the very next thing it does is send the same emails to everyone in your contacts.”

The application, along with online domains it was connecting to, were disabled within hours of it starting to spread wildly, according to Quintin.

ADVERTISEMENT

“I suspect that it was far more successful than whoever released it into the world hoped or expected, and was maybe undone by its own success,” he said.

“The domains went down pretty quickly. Google disabled the app, so it is no longer a threat.”

The campaign affected fewer than a tenth of a percent of Gmail users, and was stopped within an hour, according to the California-based internet powerhouse.

Gmail is reported to have more than a billion users.

Google determined that while contact information was accessed, no other data was gleaned by the ruse, according to the spokesperson.

Your subscription could not be saved. Please try again.
Your subscription has been successful.

Subscribe to our daily newsletter

By providing an email address. I agree to the Terms of Use and acknowledge that I have read the Privacy Policy.

TOPICS: Email, Google, Google Docs, hacking, Internet, Phishing, scam, Software, US, Virus
Read Next
Don't miss out on the latest news and information.

Subscribe to INQUIRER PLUS to get access to The Philippine Daily Inquirer & other 70+ titles, share up to 5 gadgets, listen to the news, download as early as 4am & share articles on social media. Call 896 6000.

For feedback, complaints, or inquiries, contact us.
Your subscription could not be saved. Please try again.
Your subscription has been successful.

Subscribe to our technology news

By providing an email address. I agree to the Terms of Use and acknowledge that I have read the Privacy Policy.



© Copyright 1997-2023 INQUIRER.net | All Rights Reserved

We use cookies to ensure you get the best experience on our website. By continuing, you are agreeing to our use of cookies. To find out more, please click this link.