A sophisticated phishing attack is Watch The Fearless Onlineracing across the internet, and may already have hit your inbox.
The definitely not-legit email disguises itself as an official message from Google alerting you that someone wants to share a Google Doc with you. Notifications of this sort are common and often wouldn't raise an eyebrow.
However, clicking through this particular link and taking the requested steps will open up your inbox — and potentially everyone on your contact list — to an as-of-yet unknown attacker.
This Tweet is currently unavailable. It might be loading or has been removed.
And, like we said, the link looks real — complete with a little "Open in Docs" blue box.
This Tweet is currently unavailable. It might be loading or has been removed.
Just how widespread is this? Numerous reporters at Mashable have received the same phishing email, as have students at Columbia University— as a warning email sent out by a member of the Philosophy department shows. The scam may have even hit the Capitol.
This Tweet is currently unavailable. It might be loading or has been removed.
Google confirmed that it is aware of the problem and is looking into it.
According to one Reddit user, once a victim clicks on the fake Google Doc link, he or she is taken to a real Google page prompting you to select an account. After that, they are taken to a new page asking that they allow "Google Docs" to access the account.
If you click "allow," the attacker can access your account. And all your contacts will likely soon receive a fake Google Doc invite from you.
So, how to tell if that latest Google Doc your friend shared is real or fake? Thankfully, there are a few tell-tale warning signs. First, real Google Doc invites look different than the recent fake. Here's a legit one for comparison:
Notice the Google address at the bottom? And the box border formatting? The fake Google notification doesn't have that.
Second, expand the dropdown option in the menu bar next to the sender's name. Below is a real Google notification for a shared Google Doc.
Lastly, the spam email is also addressed to "[email protected]," which is an account with the disposable email service Mailinator.
If you did happen to click on the malicious link and allowed attackers into your account, you can revoke that access relatively easily. First, go to your Google permissions page. There you will find a list of all the apps that have account access. One app, titled Google Docs, is the offender. Revoke its permission immediately, and then change your password.
This Tweet is currently unavailable. It might be loading or has been removed.
So now that you know what's up, pay extra attention to any Google Docs coming your way. And, well, to anything asking you to click a link and enter your password or share account permission.
Topics Cybersecurity Google
Megan Rapinoe calls out Trump: 'Your message is excluding people''Stranger Things' Season 3 is home to a big ARG that's still unfolding10 tips for new writers from a selfNintendo reveals the Switch Lite for people who just play on the go10 tips for new writers from a selfThe harrowing tale of Ryan Seacrest getting stuck in a Times Square elevator'Friends' to leave Netflix, head to HBO Max streaming serviceTwitter bans 'dehumanizing language' aimed at religious groupsYour Apple Watch will guilt you into working out in the New YearWhy Apple's smart to kill the 12'Stranger Things' Season 3 is home to a big ARG that's still unfolding'Stranger Things' Season 3 breaks viewership record, Netflix claimsApple's iCloud could get Face ID and Touch ID support with iOS 13Relive 1997 with 20 songs turning 20 in 2017Elon Musk: Your time to buy a Tesla car is limitedWhy Apple's smart to kill the 12How to shop from small businesses on Amazon's Prime Day'Stranger Things' Season 3: Why that devastating finale is a fake outTwitter users know the real reason Trump Tower was evacuatedWhy the Spider Best hair dryer deal: Save $30 on the Dreame Gleam Hair Dryer NYT mini crossword answers for April 26, 2025 Medvedev vs. Nakashima 2025 livestream: Watch Madrid Open for free Best Apple iPad deal: Save $50 on the 11 NYT Connections hints and answers for April 27: Tips to solve 'Connections' #686. Tiafoe vs. Müller 2025 livestream: Watch Madrid Open for free Best Samsung deal: Save $90 on the Samsung Galaxy Watch 7 'The Last of Us' Season 2, episode 3's opening credits has a heartbreaking change 'The Last of Us' Season 2, episode 3: Why does Tommy say 'Give Sarah my love'? 'The Last of Us' Season 2, episode 3: Seth's dramatic change from the game Nothing CMF Phone 2 Pro revealed: Preorder, pricing, specs Best VR deal: Save $30 on the Meta Quest 3S NYT Strands hints, answers for April 27 Asus TUF A16 Gaming Laptop deal: Get 29% off at Amazon WhatsApp, Signal scam leads to Microsoft account hacks [April 2025] NYT Strands hints, answers for April 26 NYT Connections Sports Edition hints and answers for April 27: Tips to solve Connections #216 35+ best Amazon Gaming Week deals: Shop Nintendo, AMD, MSI, and more Eufy Omni S1 Pro robot vacuum: $500 off at Amazon AI's toll on humanity, the environment remains dangerously unclear, government agency warns
1.1977s , 10164.7421875 kb
Copyright © 2025 Powered by 【Watch The Fearless Online】,Wisdom Convergence Information Network