If you've received an invitation to join a shared Google Doc that you weren't expecting, you might want to steer clear of it. It's probably a phishing scam that could compromise your account.Internet users everywhere are being spammed with what appear to be malicious invitations to log on to their Google accounts. Unlike your garden-variety cyberattack, many of the telltale signs that could tip you off that something is awry are absent.For example, the attack appears to work by tricking you into logging into your actual Google account, then granting a third party (your attacker) access to your account's data. Having gained permission to access your contacts, the attacker then fires off spam invites to everyone in your address book.What makes this attack so tricky to detect is that it takes advantage of Google's legitimate tool for sharing data with responsible third-party apps. Since the bogus invitation is being routed through Google's real system, nothing is misspelled, the icons look accurate, and it's hard to know something's gone wrong until it's too late.Google said Wednesday that it is working to ensure this type of “spoofing” doesn't happen again.The Switch newsletterThe day's top stories on the world of tech.Sign up“We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts,” the company said in a statement. Google later said that it was able to put a stop to the attack within an hour of discovery. It also said 0.1 percent of Gmail users were affected by the attack; with more than a billion users, though, that adds up to over 1 million who may have been hit by the spam.
Foresenics - Informática forense