🚨🚨🚨 Really major Gmail phishing attack going around right now. Do NOT click on an unexpected "Open in Docs" link.
Whether or not you have, now is a great time to review the apps you've authed to your account: https://security.google.com/settings/security/permissions
@xor Have a link to an article explaining the phishing atttack?
I'm not using gmail, but I'm curious what it's doing.
@cwebber I haven't seen an article, but it's "just" getting oAuth access to mail and contacts for a rogue app named "Google Docs" (then spamming it out)
@xor @cwebber Here's two articles:
https://www.theatlantic.com/technology/archive/2017/05/did-someone-just-share-a-random-google-doc-with-you/525279/
https://www.theverge.com/2017/5/3/15534768/google-docs-phishing-attack-share-this-document-with-you-spam
Some additional info too: https://toot.works/@chris/81914
@xor @cwebber there's this i guess https://www.reddit.com/r/google/comments/692cr4/new_google_docs_phishing_scam_almost_undetectable/