Showing results for 
Search instead for 
Did you mean: 
Silver VIP

Secure Google Docs email results in mailbox compromise

A large scale phishing attack has been making the rounds this week pretending to be a "Secure Document" being sent to you via Google Docs.

While those of us in the security industry might not be surprised, phishing attacks are consistently proving themselves to one of the most effective ways to evade traditional defenses.

As many organizations move to the Google cloud, this type of phishing lure will continue to yield results for the criminals.

The email reads:

A Secure Document was sent to you by your financial institute using Google Docs.
Follow the link below to visit Google Docs webpage to view your Document
Follow Here. The Document is said to be important.
Happy Emailing,
The Gmail Team

Phishing emails aren't exactly rare, but this one caught my eye. In addition to being a somewhat plausible lure, it is an equal opportunity exploit.

If you click the link you are presented with a phishing page hosted in Thailand.

The page not only asks for your Google credentials, it also suggests it will accept Yahoo!,, Hotmail, AOL, Comcast, Verizon, or any other email account.


Full Story  beta_tester_transparent.png

Luminary Signature.png

2016-07-18_12-11-32.png  Microsoft® Windows Insider MVP - Windows Security

Silver VIP

Re: Secure Google Docs email results in mailbox compromise

Quite interesting!  I actually saw this at work today, sent to an email address that is rarely used and generally does not receive any spam.  


Corporate users beware, this one may very well slip past any filtering software you have in place.



New to the Community? Register now and start posting!

Helpful Webroot Links:

Download (PC)   Download (Best Buy Subscription)   Submit Trouble Ticket   Account Console   User Guides   

"If you don't learn something new every day, you need to pay more attention. I often get my daily learning here so grab a chair and stay a while!"

WSA-Complete (Beta PC), WSA Mobile (Android), WSA Business Mobile (Android) WSA-Endpoint (PC- Some of the time.....)