There is a new scam going on!
Here is how it works.
Don’t Open That Shared Google Doc Yet!
You get an email in your inbox.
The email states that you are invited to see a Google Doc that someone has shared with you. You click on the link…thinking that you are heading to that Google Doc.
Instead, you are led to what looks like a Google account but, is actually a scammers fake Google page hosted on another server.
The page you are led to looks just like a real Google doc page and it asks for all of your sign-in information . When you fill out what you think is a Google doc you are even led back to a Google doc to verify it.
Here is the scoop!
The Better Business Bureau says that :
The scammers are using an actual Google Drive account to host the scam file, which lends a legitimizing Google.com URL to their con. Inputting your email and password into the fake form gives scammers access to your Google Drive, Gmail and any personal information stored within.
When someone steals your sign-in information you can lose access to your account and everything in it.
Google says that these bad guys:
- Can go through – or even delete – all of your emails, contacts, photos, etc.
- Pretend to be you and send unwanted or harmful emails to your contacts
- Use your account to reset the passwords for your other accounts (banking, shopping, etc.)
- Google says that it’s easier than you think for someone to steal your password Any of these common actions could put you at risk of having your password stolen:
- Using the same password on more than one site
- Downloading software from the Internet
- Clicking on links in email messages
- Look for a phishing alert. Gmail may automatically display warnings on messages they suspect are phishing attacks. Always look for these warnings at the top of your email.
- Know when you are logged in. If you are already logged into Gmail to check your email, you won’t need to log-in again to view a Google Drive document.
- Remember to log out when you are done.
- Using a public computer? Restart the computer when you are done and have signed out.
- Report it: Help Google identify suspicious emails by reporting them. On an email message, click the down arrow next to “reply” and select “report phishing.”
- Before you open that email, read the teaser and identify whether or not you know the sender and if you are expecting a Google Doc from that person.
- Hover over email links to check out the landing pages.
- If your account may have been compromised…. Be sure to review this security checklist to make sure scammers aren’t accessing your email. Topics covered include checking past log-in locations and making sure auto-forwarding isn’t activated.
For more information about reporting scams and protecting your Google accounts, see Google’s support site. To read more about the Google Drive scam, check out security company Symantec’s blog post. To find out more about scams, check out BBB Scam Stopper.
Related Posts Just for You