Don't click that Google Doc invite, but if you did, here's what to do

NJ.com ^ | May 03, 2017 | Spencer Kent

[iowamark]

You've probably heard about that treacherous phishing scheme going around the Internet masquerading as a Google Doc invitation. Worse, maybe you've fallen victim to the scam, yourself.

For those still unscathed, here are a few tips to keep you nice and safe. As for all you innocent bystanders out there panicking after clicking on one of the links, don't freak out. Take a deep breath and read this carefully. We'll get through this together.

First, what is it?

People have been reporting getting emails from a known contact seeking to share a Google Doc with them. After clicking the invite and signing into what appears to be an authentic Google sign-in page, the bug then spreads to that person's contacts...

How can you tell?

One obvious sign that you've been targeted is if the email is addressed to something like, "hhhhhhhhhhh@mailinator.com." Also, use your judgment. Maybe there is something included in the email that you know is uncharacteristic of that known contact.

How do I avoid being hit?

The answer is simple: Don't click on any Google Doc invitations for the time being -- not from your mother, your father, no one. Again, a lot is still not known about this bug, and how it is affecting users, media reports have said.

What do I do if I clicked on the link?

First, don't beat yourself up, it isn't a reflection on you. Second, immediately change your password.

Reports are also advising users to go through their Gmail Account Recovery security checklist.

The good news is, it wasn't malware, which is often much more harmful...

To recap, phishing attacks can usually be thwarted by the user changing his or her password. But make sure to use some numbers and symbols in there. And make sure to do it soon.

[iowamark]

I got one very similar to this:

[wally_bert]

I don’t know of anyone that would share a google doc with me so I shouldn’t have to worry about that threat.

[ButThreeLeftsDo]

IT here at work sent out a big warning a couple of hours ago.

[faithhopecharity]

So did we. We sent it to the junque file right away. Fortunately we didn’t open it.

[iowamark]

http://www.slate.com/blogs/future_tense/2017/05/03/don_t_click_on_unexpected_emails_with_google_doc_invitations_it_s_a_major.html
“Do Not Click on Unexpected Emails Inviting You to Edit a Google Doc. It’s a Major Phishing Attack.”

http://bigislandnow.com/2017/05/03/phishing-scam-warning-google-docs/
“Phishing Scam Warning: Google Docs”

http://bigislandnow.com/2017/05/03/phishing-scam-warning-google-docs/
“Do Not Open the Google Docs Email You Receive Today: It May Be a Scam”

[Hugin]

Best course is to have nothing to do with Google.

[umgud]

I got one earlier today from a business contact.

[LouieFisk]

“IT here at work sent out a big warning a couple of hours ago.”
~~~~~~~~~~~~~~~~~~~~~~~~
Your IT should have already instructed everyone not to click on email links.

[lewislynn]

I wouldn’t click on anything with “GOOGLE” in it. Nor would I ever “GOOGLE IT”

[texas booster]

I have already gotten several, all from teachers and administrators at schools.

Google Docs is spreading through K12 like a virus ... But it is Free they say ...

[FreeAtlanta]

We have training, and a service that sends fake phishing emails to employees to see if they are paying attention.

[ButThreeLeftsDo]

Even though we are regularly warned not to, it’s always one of the Asian engineers that cannot resist.

[VTenigma]

I don’t click on anything with Google in it’s name. Hopefully I’m safe. Commie bastiges.

[LouieFisk]

“Even though we are regularly warned not to, it’s always one of the Asian engineers that cannot resist.”
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Wait til they get that fortune from the Nigerian King!

[Utilizer]

Got one of those the other day. Curious -clicked on it.

Tried to connect to the Goog. LMBAO (Laughed My Bloody Arse Off). Because:

1. No google account.
2. No google docs created, accessed or saved. Ever.
3. No GMail account.
4. Internet Access is not conneced to a GMail account.
5. No “Contacts List” to access.

and finally:

6. Running Linux. WinDoze commands or any Outlook or Outlook Express functions are not functional in a ‘nix environment.

I also love it when I get sent a pop-up that says that My Windows Machine has Been Infected! Has a Virus! A Bootsector Virus! No really -go here to update your files and repair your corrupted system!

*laughs uproriously* :)

[ButThreeLeftsDo]

Unrelated...

Was reading the local police blotter on line yesterday.

Fraud Alert.

Local resident reported that they received a call from the IRS (we’ve all gotten these...the IRS doesn’t make phone calls).

They were informed that they owed $7,000 in back taxes. If they didn’t settle up immediately, they were going to jail.

Oh, it was $7,000 in GIFT CARDS that was demanded.

After sending $1,000 worth of gift cards, they finally figured out that they had been scammed.

They realized that the IRS doesn’t accept gift cards.

[angryoldfatman]

Somebody younger than 60 still falls for this junk?

[LouieFisk]

"They realized that the IRS doesn’t accept gift cards."
~~~~~~~~~~~~~~~~~~~~~~~~~~~
I've heard of that scam. It's like when a bro's browser locked up on a page that claimed to be the FBI saying the had broken a whole bunch of fed laws.
The good news was that if he paid a fine by sending x amount of $$$ to the FBI via money transfer, he wouldn't be prosecuted!
I knew about that scam, too. It's just a simple browser java-script trick that freezes a page. You just shut down the browser, clean the cache and you're good to go. I had to tell the bro the FBI doesn't do blackmail (at least not that way, heh).
The scam usually looks like something along this line:

[LouieFisk]

“I also love it when I get sent a pop-up that says that My Windows Machine has Been Infected!”
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Yup, heh. I’m a duel-boot Nixer (Mint). I scan the Windows side from Mint using Bitdefender for Unices (free license) - it’s also handy to check any files before moving ‘em to the Win side or a USB stick.