It's not a click
Have you received any mail holding a google docs link from an unknown person? Then don't open the mail. Because, for past few hours, journalists, Enterprises and even individuals are continuously receiving such mails. And most of the mails were sent by actors with a malicious link to steal credentials of the targeted victim. A mail starting with a quote,'[sender] has shared a document on google docs with you' is the phishing mail, which had been shared across the world. How it works? When you open the mail and click the link. It redirects you to a page, which request you permission to read, send, delete emails and even access your contacts. If you give the permission to access it, then the attacker will automatically access your mail account without any password. Here you have know that, the links hoisted by Google docs doesn't ask permissions to access. But this link is malicious and created by actors. So, be careful, before you allow permission to anything. How big is the threat? To be honest, this threat seems to be most dangerous than you think. Because, as soon as you grant the permission, it would potentially allow the hackers to access your contacts and account linked sites and services such as Facebook, twitter and even bank accounts. Also, hackers will send multiple phishing mails to all your contacts to gain control on their accounts. And this goes as a chain. In the meantime, google started blacklisting malicious apps, which were used in this phishing attack. Regarding the issue, tech giant Google tweeted that, 'We are investigating a phishing email that appears as Google Docs. We encourage you to not click through & report as phishing within Gmail. ' And now, the chain goes on its own across the millions of gmail users in multiple organisations and media outlets. If you had granted permission to those malicious links, don't worry. You can reverse your permission from Google docs by following method. Go to your Gmail accounts permissions settings at https://myaccount.google.com and Sign-in.
Go to Security and Connected Apps.
Search for "Google Docs" from the list of connected apps and Remove it. It's not the real Google Docs.
