There is a wide report and wild reaction from users as Phishing takes over through a link that pops up online.
The report which started on Wednesday, 26th April also gave it a wide trend within hours.
According to CNN report, “The sophisticated attack looks like it is coming from a trusted source asking you to open a Google Document. If you click, it takes you to a page to open the “Google Docs” app with your Google (GOOG) account. This grants access to your email account and contacts”.
Anyone who clicked on the link should check their Google App permissions and remove the one called “Google Docs.”
Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and, indirectly, money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
It’s is an attack or popular method of stealing credentials and hacking into people’s emails, bank accounts or other private accounts. A hacker poses as a trusted source and sends you a malicious link.
It is still unclear how wide this attack is and it is also not clear who is behind it. It comes with a fake Google Docs app which can read your contacts and send more phishing attempts to your contacts.
Google is currently investigating the phishing scam. The company has advised people not to click on the link and report any phishing attempts to the company.
“We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts,” Google said in a statement. “We’ve removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again.”
Here’s what happened: Hackers created a malicious app and named it “Google Docs,” which looked trustworthy. Google uses an authorization system called OAuth, which uses security tokens instead of passwords to connect your Google account with third party apps. Because the malicious app looked legit, it essentially tricked users into trusting it with their security token — which is all that was needed to access the accounts.
To save us the stress, do not click links any how, do not download any app that’s says Google Doc for now unless you are sure about it and finally do not use the cloud.
