{"id":339991,"date":"2017-05-04T04:03:46","date_gmt":"2017-05-03T20:03:46","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1485049"},"modified":"2017-05-04T04:03:46","modified_gmt":"2017-05-03T20:03:46","slug":"psa-this-google-doc-scam-is-spreading-fast-and-will-email-everyone-you-know","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/psa-this-google-doc-scam-is-spreading-fast-and-will-email-everyone-you-know\/","title":{"rendered":"PSA: This Google Doc scam is spreading fast and will email everyone you know"},"content":{"rendered":"<p id=\"speakable-summary\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=566&amp;h=367\" alt=\"\" width=\"566\" height=\"367\" class=\"aligncenter size-full wp-image-1485058\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png 566w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=150&amp;h=97 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=300&amp;h=195 300w\" sizes=\"(max-width: 566px) 100vw, 566px\"\/><\/p>\n<p>A new Google Docs phishing scam just reared its head a few hours ago, and it\u2019s spreading like wildfire. Google appears to be taking action to stop it, but in the mean time: be super, super wary of Google Doc invites for now.<\/p>\n<p>Here\u2019s what you need to know:<\/p>\n<ul readability=\"2.8694690265487\">\n<li>Clicking the link takes you to a real Google-hosted page, with a list of your Google accounts ready to click<\/li>\n<li>It asks you to select an account and provide an app called \u201cGoogle Docs\u201d \u2014 yes, they were somehow allowed to name a third party app \u201cGoogle Docs\u201d \u2014 with the necessary permissions<\/li>\n<li>As soon as you click the \u201callow\u201d button, this not-at-all-actually Google Docs app now has permission to read your emails and email all your contacts\u2026. the latter of which it\u2019ll start doing pretty much immediately, spreading the bait to pretty much everyone you\u2019ve ever emailed.<\/li>\n<li readability=\"8.30859375\">\n<p>This one is <em>super<\/em> sneaky; pretty much the only way to detect it before falling for it is to click the small \u201cGoogle Docs\u201d link <em>on the actual Google-hosted page<\/em> and notice that the developer info seems\u2026 off.<\/p>\n<p>Zach Latta of Hack Club grabbed a video of the whole flow so you don\u2019t have to test fate to see it for yourself:<\/p>\n<h2>How do I know if I\u2019ve been hit? How do I fix it?<\/h2>\n<p>Check your Google account\u2019s <a target=\"_blank\" href=\"https:\/\/myaccount.google.com\/permissions\">app permissions<\/a>. There <em>should not<\/em> be an app called \u201cGoogle Docs\u201d there \u2014 <em>actual<\/em> Google Docs has access to your account by default. If you see it listed there, remove it by tapping the label and hitting \u201cRemove\u201d<\/p>\n<p><em>Story developing\u2026<\/em><\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"566\" height=\"367\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=566\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png 566w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=150 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/05\/gdoc.png?w=300 300w\" sizes=\"(max-width: 566px) 100vw, 566px\" \/>&nbsp;A new Google Docs phishing scam just reared its head a few hours ago, and it&#8217;s spreading like wildfire. Google appears to be taking action to stop it, but in the mean time: be super, super wary of Google Doc invites for now. Here&#8217;s what you need to know: Clicking the link takes you to a real Google-hosted page, with a list of your Google accounts ready to click It asks you to&hellip; <a href=\"https:\/\/techcrunch.com\/2017\/05\/03\/psa-this-google-doc-scam-is-spreading-fast-and-will-email-everyone-you-know\/?ncid=rss\">Read More<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:2mJPEYqXBVI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=2mJPEYqXBVI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:7Q72WNTAKBA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=7Q72WNTAKBA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=yIl2AUoC8zA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:-BTjWOF_DHI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=J1yKAIwKF5M:NwF8fTU8qHg:-BTjWOF_DHI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=J1yKAIwKF5M:NwF8fTU8qHg:D7DqB2pKExk\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=J1yKAIwKF5M:NwF8fTU8qHg:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/Techcrunch\/~4\/J1yKAIwKF5M\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-339991","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/339991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=339991"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/339991\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=339991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=339991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=339991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}