A sophisticated phishing attack is racing across the internet, and may already have hit your inbox.
The definitely not-legit email disguises itself as an official message from Google alerting you that someone wants to share a Google Doc with you. Notifications of this sort are common and often wouldn't raise an eyebrow.
However, clicking through this particular link and taking the requested steps will open up your inbox — and potentially everyone on your contact list — to an as-of-yet unknown attacker.
Tweet may have been deleted
And, like we said, the link looks real — complete with a little "Open in Docs" blue box.
DON'T CLICK.Credit: mashableTweet may have been deleted
Just how widespread is this? Numerous reporters at Mashable have received the same phishing email, as have students at Columbia University— as a warning email sent out by a member of the Philosophy department shows. The scam may have even hit the Capitol.
Oops.Credit: MashableTweet may have been deleted
Google confirmed that it is aware of the problem and is looking into it.
According to one Reddit user, once a victim clicks on the fake Google Doc link, he or she is taken to a real Google page prompting you to select an account. After that, they are taken to a new page asking that they allow "Google Docs" to access the account.
Just don't.Credit: Jake SteamIf you click "allow," the attacker can access your account. And all your contacts will likely soon receive a fake Google Doc invite from you.
So, how to tell if that latest Google Doc your friend shared is real or fake? Thankfully, there are a few tell-tale warning signs. First, real Google Doc invites look different than the recent fake. Here's a legit one for comparison:
Lunch!Credit: MashableNotice the Google address at the bottom? And the box border formatting? The fake Google notification doesn't have that.
Second, expand the dropdown option in the menu bar next to the sender's name. Below is a real Google notification for a shared Google Doc.
Credit: mashableLastly, the spam email is also addressed to "[email protected]," which is an account with the disposable email service Mailinator.
If you did happen to click on the malicious link and allowed attackers into your account, you can revoke that access relatively easily. First, go to your Google permissions page. There you will find a list of all the apps that have account access. One app, titled Google Docs, is the offender. Revoke its permission immediately, and then change your password.
Tweet may have been deleted
So now that you know what's up, pay extra attention to any Google Docs coming your way. And, well, to anything asking you to click a link and enter your password or share account permission.
TopicsCybersecurityGoogle
(责任编辑：時尚)
Donald Trump's tangled web of Russian influence
This white horse holds the key to two major 'Game of Thrones' fan theories
Zac Efron falls flat on his face, brings untold joy to the world
Good genes: Mom, son to make history competing at 2016 Olympics together
Over 82,000 evacuate as Blue Cut fire rapidly spreads in southern CaliforniaOne of the first Apple computers ever made is currently up for auction.A rare "Celebration" Apple-1
...[详细]Zac Efron's ‘Baywatch’ tumble trips into a Photoshop battle
The iconic slow-mo "Baywatchrun" is harder than it looks. Just ask Zac Efron.A recent photo from the
...[详细]Someone is trolling this random British street by repeatedly replacing the sign
LONDON -- On a random street in Boston in England, there's a deeply odd mystery brewing.For a reason
...[详细]Spending a lot of time on social media could be making you depressed
Anyone who regularly uses social media will have had the experience of feeling envious of the fun th
...[详细]U.S. pole vaulter skids to a halt for national anthem
An American pole vaulter took his patriotism to the next level at the Olympics.。Sam Kendricks, a sec
...[详细]Report exposes which Aussie suburbs are the most charitable
Charitable giving is for everyone, but it's fair to wonder whether the top end of town is donating t
...[详细]Man tracks down lost iPad with technology and balloons
Shelby Bonnie had just made a connection at Fort Lauderdale-Hollywood Airport when he realized he ha
...[详细]Start making 'Fallout 4' content now, then play it on consoles in June
Bethesda Softworks' long-promised plan to let amateur programmers create their own Fallout 4content
...[详细]Dramatic photo captures nun texting friends after Italy earthquake
The image of an injured, bloodied nun, calmly texting friends and family in the wake of the deadly e
...[详细]Ouch: Some Slack developers have been exposing corporate data
If you perform a very specific query in the search field of online code repository Github, where man
...[详细]Cat gets stuck in the most awkward position ever
Craig Wright to offer 'extraordinary proof' he is the creator of Bitcoin
