Google warns of email scam that impersonates Google Docs

FILE - This Oct. 20, 2015, file photo, shows a sign outside Google headquarters in Mountain View, Calif. Google is warning users Wednesday, May 3, 2017, to beware of a phishing scam spread by a fraudulent invitation to share a Google Doc. (AP Photo/Marcio Jose Sanchez, File)

SAN FRANCISCO (AP) — Google said it shut down an email spam campaign that impersonated its online file service, Google Docs.

According to online reports — in particular, a detailed user thread on Reddit — clicking on an emailed share link, purportedly from a known source, was taking users to a site that asked permission for a fake app calling itself “Google Docs” to access their accounts. If they agreed, the app would then send additional copies of the original email to the users’ contacts.

Earlier reports suggested the attack was a phishing scam potentially aimed at harvesting personal information and maybe even Google login credentials. But in a statement late Wednesday, Google said that while the campaign accessed and used contact information, no other data was apparently exposed.

Google said it was able to stop the campaign in about an hour. It has disabled offending accounts, removed fake pages and updated its Safe Browsing feature, which issues warnings when users visit dangerous sites.

Users don’t have to take additional action, although Google encouraged those who want to be extra safe to run its security check feature.

One telltale sign for identifying the spam email: It appears to be directed to the address hhhhhhhhhhhhhhhh@mailinator.com, and is only blind copied to the recipient.

WIVB.com provides commenting to allow for constructive discussion on the stories we cover. In order to comment here, you acknowledge you have read and agreed to our Terms of Service. Commenters who violate these terms, including use of vulgar language or racial slurs, will be banned. Please be respectful of the opinions of others. If you see an inappropriate comment, please flag it for our moderators to review. Note: Comments containing links are not allowed.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s