If you open your e-mail, there’s a really good chance there’s an e-mail in there from “firstname.lastname@example.org”, or something similar, with a google docs attached to it. Don’t click it!
I get it, it’s tempting. We received it earlier to email@example.com. I immediately deleted it. A co-worker wasn’t so lucky however. And now, we’re seeing it definitely is not an internal or isolated incident, as this has spread nationwide.
What do you do if you clicked it?
First thing, as far as we can tell, it’s not a virus infecting your computer, so that’s the good news. It has however now sent out spam e-mails to just about everyone you’re connected to through google, amking it look like it’s coming from you. Here’s what you need to do:
- Go to your Gmail account’s permissions settings at https://myaccount.google.com/permissions
- Remove permissions for “Google Docs,” the name of the phishing scam.
- It’s possible it might be something other than “Google Docs”. If you select each one, it’ll tell you the authorized date. If it’s today, you know that’s the one.
- Warn your friends to be cautious of e-mails from you.
What if I haven’t clicked it?
You should be okay, as long as you don’t click the google docs link. Just delete the e-mail permanently, as quickly as possible. And be on the look out for more like it coming, including e-mails with google docs from your friends who may have not been as lucky.
Google is investigating. Find out more here.