Google Docs Phishing Attack Abuses Legitimate Third-Party Sharing

Phishing messages appear nearly identical to legitimate requests to share Google documents, because in many ways, they are.

Google users today were hit with an extremely convincing phishing spree launched by attackers who manipulated Google Docs legitimate third-party sharing mechanism.
Targets received messages with the subject like [Sender] has shared a document on Google Docs with you often from senders they knew. The messages contained links, which led to a page that clearly requested access to the users Gmail account. If the target user provides access, the attack begins sending spam to all the users contacts. Theoretically, the attacker could also access the victims messages and steal sensitive data, but thus far there have been no reports of such activity.
Because it takes advantage of Googles legitimate third-party sharing mechanism, the phishing message is much more difficult to identify as malicious. The icons and messaging are familiar to Google users. Gmail itself did not filter the messages as phishing or flag them as spam, but rather sent them to Gmail users Primary inbox mail folders. The senders were familiar enough to have the target in their contact lists.
One way to spot the attack: some targets report that the message includes a recipient with an address that begins hhhhhhhhhhhhhh and ends with the domain mailinator.com.
Google responded with a fix and issued
a statement
:
We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts. We’ve removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again. We encourage users to report phishing emails in Gmail. If you think you were affected, visit
http://g.co/SecurityCheckup

Those who have already fallen victim to this attack should also go to their
Google account permissions settings
and revoke access to the false Google Docs application. Theyre also advised to set up two-factor authentication.
Read more
here
.

Last News
▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security	▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security	▸ Criminal Possession of Government-Grade Stealth Malware ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Google Docs Phishing Attack Abuses Legitimate Third-Party Sharing