Google Docs users hit by phishing scam

[Becky]

A fishing email which targeted users through Google Docs reached around 1 million people, according to reports. Google stopped the fishing attack within an hour of it being sent out, but not before victims unwittingly risked giving the hackers access to their email accounts.

"While contact information was accessed and used by the campaign, our investigations show that no other data was exposed," Google said in an updated statement.

"There's no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup."

Read more here.

 

[V_R]

Saw this blowing up on Reddit yesterday, it was not good. Thankfully its been patched now.

Official statement:
We realize people are concerned about their Google accounts, and we’re now able to give a fuller explanation after further investigation. We have taken action to protect users against an email spam campaign impersonating Google Docs, which affected fewer than 0.1 percent of Gmail users. We protected users from this attack through a combination of automatic and manual actions, including removing the fake pages and applications, and pushing updates through Safe Browsing, Gmail, and other anti-abuse systems. We were able to stop the campaign within approximately one hour. While contact information was accessed and used by the campaign, our investigations show that no other data was exposed. There’s no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup. (source)