For the first time in recent memory, people all over the internet appear to have just gotten the same phishing email at the same time, and it didn’t go directly into their spam folders. This kind of thing was common in the early 2000s, but rarely happens on such a massive scale today.
Phishing (or malware) Google Doc links that appear to come from people you may know are going around. DELETE THE EMAIL. DON'T CLICK. pic.twitter.com/fSZcS7ljhu
— Zeynep Tufekci (@zeynep) May 3, 2017
It seems to be everywhere, all at once.
Be very careful guys. There is a google Doc spreading around like mad right now which has a phishing attempt in it. Don't open it! pic.twitter.com/P6I17cxLuo
— Leslie Fisher (@lesliefisher) May 3, 2017
It includes an invitation to open a Google Doc.
Well this is a fun phishing/email worm. Requests OAuth perms for Gmail & contacts then hits this URL and spams everyone you’ve ever emailed. pic.twitter.com/nOB29uJUZ9
— Joshua Gross (@endtwist) May 3, 2017
It will have BCC’d you, and been sent to the address email@example.com. If you click it, it will email everyone in your contacts list.
I got a Google Doc invite from a BuzzFeed email address, clicked on it, and it spammed everyone I’ve ever emailed
— Joe Bernstein (@Bernstein) May 3, 2017
Luckily, it appears Google may already be catching on.
Got another one: Google seems to have cottoned on to the threat now tho pic.twitter.com/IV6vEK62bN
— Mike Murphy (@mcwm) May 3, 2017