Google
said it was investigating an email scam winding its way through inboxes
across the country and had disabled the accounts responsible for the
spam.
The
scheme emerged Wednesday afternoon, when spammers dispatched malicious
email, appearing to come from people the recipients knew, beckoning them
to click on what appeared to be a shared Google document.
Recipients
who clicked on the links were prompted to give the sender access to
their Google contact lists and Google Drive. In the process, victims
allowed spammers to raid their contact lists and send even more email.
“We
are investigating a phishing email that appears as Google Docs,” Google
said statement posted on Twitter. “We encourage you to not click
through and report as phishing within Gmail.”
It is not clear who created the spam email or how many people it has affected.
With Google Docs phishing scam, people have become worried on what accounts they need to sync with their Google so that they aren’t victims of online hacking. As reported, one million Google users’ accounts were hacked, thanks to the scam.
But the question then arises: how does one know what account is safe and what isn’t. The answer is simple. Follow the steps to know how you can get rid of apps that you feel breach your online privacy.
- For starters, go to your Google Account Page
- The first option is Sign in and Security. At the bottom of that option is an option that says, Connected Apps and Sites’
- You are then redirected to a new window where if you scroll down, you come across an option that says, “Manage Apps”
- You can choose the applications that you don’t want synced with your Google account by clicking on them and then selecting the Remove option
The scam combined "a phishing attack and a worm," using a deceptive email to get people to open the door to malicious code that wriggled into their messaging programs to spread itself to others, according to Electronic Frontier Foundation staff technologist Cooper Quintin. Email sent from a known contact's real address would arrive containing a link it claimed led to a file to be shared at Google Docs online service, according to a rundown of the chicanery.