Google Docs Email Phishing Scam Makes Rounds
A convincing OAuth phishing email that claims the sender “has shared a document on Google Docs with you” is being used for cyber attacks.
The emails can seem to come from someone you know, but once clicked, you’re redirected to a page that says “Google Docs would like to read, send and delete emails, as well access to your contacts,” and asks for permission to allow access. If access is allowed, attackers gain access to manage your Gmail account with no required password.
Real Google Docs invitations do not require any permissions.
Return To Article
