The emails looked legit but are addressed to tweeted that it wasn't responsible for sending the emails. The scam sent potential victims a link that appeared to be a Google Doc from someone they know and then directed them to Google's account selection screen, JakeSteam wrote. Once the scheme tricked its victims, it would send emails to that person's contact list, in hopes of spreading itself. That means that victims could have been phished without even typing in their password. Look for the setting that reads, Automatically add invitations. Granting permission to a Gmail account is the "equivalent to having access to a username and password," Liam O'Murchu, director of Symantec's Security Technology and Response group said in an email. In your web Calendar app, click on the gear icon on the upper right corner of the page, and select Settings. The attacker created a rogue app made to look like Google Docs, which unsuspecting victims would grant permission to. This scheme is different because it focuses on stealing access to your account rather than stealing your username and password. The current ruse appears to have targeted journalists and educators, according to reports. In 2014, a similar scam targeted Docs and Drive users. Phishing, of course, is nothing new and Google users get targeted often.
0 kommentar(er)
