San Francisco: A ‘phishing’ scam that tricked people with what appeared to be Google Docs links was doused by the company, after spreading wildly.
The purpose of the scam, and the culprits behind it, remained unknown late in the day.
“We have taken action to protect users against an email impersonating Google Docs, and have disabled offending accounts,” a Google spokesperson said in an email response to an AFP inquiry.
“We’ve removed the fake pages, pushed updates through Safe Browsing, and our abuse team is working to prevent this kind of spoofing from happening again.”
The scam combined “a phishing attack and a worm”, using a deceptive email to get people to open the door to malicious code that wriggled into their messaging programs to spread itself to others, according to Electronic Frontier Foundation staff technologist Cooper Quintin.
An email sent from a known contact’s real address would arrive containing a link it claimed led to a file to be shared at Google Docs online service, according to a rundown of the chicanery.
Clicking the link led to a real Google web address and asked for authorization to run an application the attacker had cleverly called ‘Google Docs’.
Permissions granted to the application included allowing it to read or send email on a person’s behalf.
The application, along with online domains it was connecting to, were disabled within hours of it starting to spread wildly, according to Quintin.
“I suspect that it was far more successful than whoever released it into the world hoped or expected, and was maybe undone by its own success,” he said.
The campaign affected fewer than a tenth of a percent of Gmail users, and was stopped within an hour, according to the California-based internet powerhouse.