Submit :
News                      Photos                     Just In                     Debate Topic                     Latest News                    Articles                    Local News                    Blog Posts                     Pictures                    Reviews                    Recipes                    
Beware! Google Docs phishing attack has already affected 1 million accounts
Google users came under a massive phishing attack yesterday when they received an email saying that someone from their contacts list had shared a Google document with them.

The subject line reads: "[someone in your contacts] just shared a Google Doc with you." Since this is how Google usually sends a mail when a folder is shared with someone, so it looks real and thus gets people to click on it. The hackers have even developed an app that distributes such emails. The app also is a replica of the real Google Docs app.

Once clicked, the app asks for permissions for your Google accounts and the permissions it asks for are really vast. The permissions even though camouflaged under genuine looking permissions, give the hackers access to the droves of personal data stored on Google accounts.

What makes the case worse is that in case you deny the permission but you open the link, the virus forwards the email to everyone on your contact list.

In an issued statement, a Google spokesperson said, "We've pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again. We encourage users to report phishing emails in Gmail."

"We were able to stop the campaign within approximately one hour. While contact information was accessed and used by the campaign, our investigations show that no other data was exposed," the statement added.

BuzzFeed News also quoted a statement from the company saying that the attack affected fewer than 0.1 per cent of total Gmail users.

But with more than 1 billion Gmail users, the attack would have affected about 1 million accounts.

Google is considered as a company that values security the most among all internet-based companies in the world and to see such a large-scale attack on such a company is indicative of the fact that 'online privacy is a myth' coming true.

Email Id
Verification Code
Email me on reply to my comment
Email me when other CJs comment on this article
Sign in to set your preference
merinews for RTI activists

Not finding what you are looking for? Search here.