A sophisticated phishing attack is racing across the internet, and may already have hit your inbox.
The definitely not-legit email disguises itself as an official message from Google alerting you that someone wants to share a Google Doc with you. Notifications of this sort are common and often wouldn't raise an eyebrow.
However, clicking through this particular link and taking the requested steps will open up your inbox — and potentially everyone on your contact list — to an as-of-yet unknown attacker.
Tweet may have been deleted
And, like we said, the link looks real — complete with a little "Open in Docs" blue box.
DON'T CLICK.Credit: mashableTweet may have been deleted
Just how widespread is this? Numerous reporters at Mashable have received the same phishing email, as have students at Columbia University— as a warning email sent out by a member of the Philosophy department shows. The scam may have even hit the Capitol.
Oops.Credit: MashableTweet may have been deleted
Google confirmed that it is aware of the problem and is looking into it.
According to one Reddit user, once a victim clicks on the fake Google Doc link, he or she is taken to a real Google page prompting you to select an account. After that, they are taken to a new page asking that they allow "Google Docs" to access the account.
Just don't.Credit: Jake SteamIf you click "allow," the attacker can access your account. And all your contacts will likely soon receive a fake Google Doc invite from you.
So, how to tell if that latest Google Doc your friend shared is real or fake? Thankfully, there are a few tell-tale warning signs. First, real Google Doc invites look different than the recent fake. Here's a legit one for comparison:
Lunch!Credit: MashableNotice the Google address at the bottom? And the box border formatting? The fake Google notification doesn't have that.
Second, expand the dropdown option in the menu bar next to the sender's name. Below is a real Google notification for a shared Google Doc.
Credit: mashableLastly, the spam email is also addressed to "[email protected]," which is an account with the disposable email service Mailinator.
If you did happen to click on the malicious link and allowed attackers into your account, you can revoke that access relatively easily. First, go to your Google permissions page. There you will find a list of all the apps that have account access. One app, titled Google Docs, is the offender. Revoke its permission immediately, and then change your password.
Tweet may have been deleted
So now that you know what's up, pay extra attention to any Google Docs coming your way. And, well, to anything asking you to click a link and enter your password or share account permission.
TopicsCybersecurityGoogle
(责任编辑：休閑)
Angela Merkel just eye
Klay Thompson casually swigs a beer during post
Snapchat now lets you add Bitmoji to on
Trump once said the very thing that elected him was a 'disaster for democracy'
'Star Wars: Jedi Challenges' lets you train your light saber skills in augmented realityNew 'Captain Marvel' details revealed at Comic
Last year at Comic-Con, Marvel Studios officially announced Brie Larson as the star of。 Captain Marv
...[详细]Please stop arguing about the politics of safety pins
The KKK-endorsed president-elect of the United States just appointed a white nationalist to his cabi
...[详细]Leonard Cohen's son shares heartfelt words on his father's funeral
The passing of musical great and legend of lyricism, Leonard Cohen, on Monday Nov. 7. sent ripples o
...[详细]Mike Pence tries to end the 'Hamilton' drama while Trump stokes the flames
The feud between the Broadway musical Hamiltonand Vice President-elect Mike Pence is hopefully comin
...[详细]Here's Mike Pence touching space flight hardware you're clearly not supposed to touch
Vice President Mike Pence visited NASA's Kennedy Space Center on Thursday where he toured the facili
...[详细]Brad Pitt reportedly cleared of child abuse allegations, seeks joint custody
LOS ANGELES -- The investigation into child abuse allegations against Brad Pitt has concluded and no
...[详细]I spent my morning at New York's new Taylor Swift Experience
Welcome to New York, now home of the Taylor Swift Experience. The small museum, dedicated entirely t
...[详细]Why women in the UK just walked out of work
LONDON -- Women from all over the UK have just downed tools and left their workplaces in an act of p
...[详细]Cristiano Ronaldo posts adorable photo with all his children and we're swooning
Portuguese demigod and soccer superstar Cristiano Ronaldo posted a sweet picture with all of his chi
...[详细]Muslim Indonesians tweet support for beleaguered Christian politician Ahok
Indonesians are furiously debating charges of blasphemy against Jakarta governor, Basuki Tjahaja Pur
...[详细]Put your Amazon Echo to good use by asking it these 'Game of Thrones' questions
American Airlines replaces Gogo in
