A new Gmail Phishing Attack is Reported !

Whenever we speak about the term Phishing the first thing that comes to our mind is that our precious data has been stolen by someone by breaching our security. Most of the time what happen is as an individual user we tend to believe that no one can breach our security and we think ourselves smarter than the hackers who are trying to hack our information using the Phishing attack. Nowadays the hackers have become way smarter and intelligent than they were used to be and now they make the phishing attack so sophisticated that no matter how intelligent or how smart the person is they tend to fall into the trap.

A new Gmail Phishing attack has been reported by numbers of users around the Globe. As I stated earlier that the attackers have gone beyond our imagination and they always try to create some new sorts of attack all the times and they make these attacks in such a way that anyone can fall into the trap. This new Phishing attack has been designed in such a way that it looks genuine to the person whom it gets sent. An Email will be sent to an individual having a google document attached to it and this email will be getting sent by people who are there in your contact list.

In March another Phishing Attack was Reported, Read about it here.

The phishing emails are mostly addressed to hhhhhhhhhhhhhhhh@mailinator.com with the predetermined target placed in the BCC field. Let us dig deep into this Phishing attack and try to understand what it does and what harms it can do to an individual if he/she clicks on it:

If any user clicks the link which is there in the email, he/she will be redirected to Google accounts page with different Google accounts. The page will ask to give permission to the app named “Google Docs” as the third party apps ask for permission to access our contacts. Google docs is a fake app here. Once, the permission gets granted, the app can read email address and can spread the message to all of your contacts.

Some of the users have posted the screenshots of this phishing attack on Twitter:

1

2

Google has already taken a step against it and the company has disabled the account from where the hack gets started.The Security People at Google are dedicated enough to prevent these types of attacks in near future.Google stated that the attack affected less than 1 million users around the globe.

Make sure to not click any of such link if you ever come across such emails in your inbox and make sure to share this article with your friends and family to make them aware of this Phishing fraud and help them secure their Gmail accounts.