A sophisticated phishing attack is racing across the internet, and may already have hit your inbox.
The definitely not-legit email disguises itself as an official message from Google alerting you that someone wants to share a Google Doc with you. Notifications of this sort are common and often wouldn't raise an eyebrow.
However, clicking through this particular link and taking the requested steps will open up your inbox — and potentially everyone on your contact list — to an as-of-yet unknown attacker.
Tweet may have been deleted
And, like we said, the link looks real — complete with a little "Open in Docs" blue box.
DON'T CLICK.Credit: mashableTweet may have been deleted
Just how widespread is this? Numerous reporters at Mashable have received the same phishing email, as have students at Columbia University— as a warning email sent out by a member of the Philosophy department shows. The scam may have even hit the Capitol.
Oops.Credit: MashableTweet may have been deleted
Google confirmed that it is aware of the problem and is looking into it.
According to one Reddit user, once a victim clicks on the fake Google Doc link, he or she is taken to a real Google page prompting you to select an account. After that, they are taken to a new page asking that they allow "Google Docs" to access the account.
Just don't.Credit: Jake SteamIf you click "allow," the attacker can access your account. And all your contacts will likely soon receive a fake Google Doc invite from you.
So, how to tell if that latest Google Doc your friend shared is real or fake? Thankfully, there are a few tell-tale warning signs. First, real Google Doc invites look different than the recent fake. Here's a legit one for comparison:
Lunch!Credit: MashableNotice the Google address at the bottom? And the box border formatting? The fake Google notification doesn't have that.
Second, expand the dropdown option in the menu bar next to the sender's name. Below is a real Google notification for a shared Google Doc.
Credit: mashableLastly, the spam email is also addressed to "[email protected]," which is an account with the disposable email service Mailinator.
If you did happen to click on the malicious link and allowed attackers into your account, you can revoke that access relatively easily. First, go to your Google permissions page. There you will find a list of all the apps that have account access. One app, titled Google Docs, is the offender. Revoke its permission immediately, and then change your password.
Tweet may have been deleted
So now that you know what's up, pay extra attention to any Google Docs coming your way. And, well, to anything asking you to click a link and enter your password or share account permission.
TopicsCybersecurityGoogle
(责任编辑：百科)
Michael Phelps says goodbye to the pool with Olympic gold
One app wants to help you elect Clinton through trading your vote
Brands fly the 'W' to mark the Cubs' historic win
Ultimate drama: The World Series is going to Game 7'Rocket League' Championship Series Season 2 offers $250,000 prize poolFlorida hurricane forecast remains uncertain, but trends in state's favor
For days, a war has been raging between two of the premiere computer models used to help predict the
...[详细]First College Football Playoff rankings immediately deliver argument fodder
Ah, college football -- a fun sport to watch, but one that relies on unpaid labor and still hasn't q
...[详细]Kangaroo sneaks onto RV, comes back later with all his friends
When your RV is already bustling with three giggling children, why not let a wild animal in, too?Whe
...[详细]Deeply inspiring woman twerks her way to the polls
This just in: walking or driving to the polls is highly passé. Twerking is better.Social medi
...[详细]There's a big piece of fake chicken stuck to this phone case
If the perfect smartphone case signals a bit about who its owner is, then this silicon fried chicken
...[详细]This Cubs fan kept a lifelong promise to his father who passed away 20 years ago
Wayne Williams and his father made a pact that when the Chicago Cubs finally played in a World Serie
...[详细]Cara Delevingne had the perfect response to report she was 'bloated'
LONDON -- Cara Delevingne has hit back at a British newspaper that claimed she was too "bloated" to
...[详细]The Story Behind Chicago Cubs Fans' W Flags
Hey, Chicago, what do you say? Fly the freaking W today. As the Cubs broke 108 years of "There's alw
...[详细]Pole vaulter claims his penis is not to blame
Following the cringeworthy moment in which pole vaulter Hiroki Ogita's penis grazed the bar and he f
...[详细]Apple just blocked a controversial crime reporting app
Apple has removed a controversial crime reporting app from its app store.The Vigilante app, which is
...[详细]Metallica to seek and destroy your eardrums with new album this fall
Dropping $500,000 to spend New Year's Eve with Justin Bieber is a good idea
