A new phishing scam is going around using Google Drive. The email subject is “*(name) has shared a document on Google Docs with you” and the body of the email is a normal Google Docs description and link to a Google Doc.
The email ‘To’ field includes “hhhhhhhhhhh”, and it is Bcc’d to you, but normal emails from shared docs will only list you in the To field and not have a Bcc.
When you click the link it asks for permission to “Read, send, delete, and manage your email” and “Manage your contacts”. Normal Google Docs do not need these permissions to show you the document. If you click Allow, it appears to email everyone in your contacts, and send all your contacts to the scammer. Don’t click Allow!
If you clicked the link, check and revoke access to “Google Docs” from your Google Account Permissions website here: https://myaccount.google.com/permissions
To: Everyone
From: Veronica Brandstrader, LTS, x2171
More info: Computing Help Desk, helpdesk@wellesley.edu, 781-283-7777 (students), x3333 (faculty-staff)
