always coming home is a user on cybre.space. You can follow them or interact with them if you have an account anywhere in the fediverse.

🚨🚨🚨 Really major Gmail phishing attack going around right now. Do NOT click on an unexpected "Open in Docs" link.

Whether or not you have, now is a great time to review the apps you've authed to your account: security.google.com/settings/s

@xor what does it look like after clicking on it? Is it a zero interaction thing or is there the normal "authorize blah blah blah"? What does that page look like?

@nightpool @xor Judging from articles, it sounds like it asks you to authorize an app but it the app has the same name and icon as the actual Google Docs

always coming home @nightpool

@chris @xor yeah that's what I thought people had been describing. (cc @kaniini)

interesting if true! I'd probably not have fallen for it, because I use docs on a daily basis and it's never asked for that before, but I can see it being SUPER effective.

· Web · 0 · 1

@nightpool @xor @kaniini Agreed. I think this is one phishing attack that I might just have fallen for. It is kind of strange that you can make an app with that name though.

@chris @nightpool @xor

what i have been seeing is "open in gdocs" links that send you to a phishing login page and then a fake authorize google apps screen.

i suggest resetting password and verifying you haven't authorized any rogue apps...