Phishers Using Google Drive to Trick People into Visiting Malicious Websites

guest · Nov 3, 2020

Phishers Using Google Drive to Trick People into Visiting Malicious Websites
November 2, 2020
https://www.tripwire.com/state-of-s...rick-people-into-visiting-malicious-websites/

Reports emerged of phishers having abused a feature in Google Drive in an attempt to trick users into visiting malicious websites.

In this scam wave, users reported having received Google Drive notifications in Russian or English asking them to collaborate on unfamiliar documents. Those documents contained links to scam websites.
Some of those links tried to entice recipients into reviewing their bank account activity or accepting a cash prize. Others bombarded users with links advertising deals and/or prize selections.

Specifically, they used the Google service’s collaboration feature to create a push notification and/or email inviting people to collaborate on a document containing a link that led to a malicious website.
Click to expand...

WIRED explained that phishers likely chose this tactic in order to get their attack emails into users’ inboxes and past people’s suspicions:

The success of email spam filters has left scammers looking for new ways to get people to click on malicious links.
For scammers, it’s a clever way of putting a malicious link right in front of a potential victim.
Click to expand...

Threatpost: Scammers Abuse Google Drive to Send Malicious Links

The attack is targeting hundreds of thousands of Google users, according to WIRED. The report said that the notifications are being sent in Russian or broken English.
Targeted users took to Twitter to warn of the scams, with one Twitter user saying that the only red flag of the scam was that he wasn’t expecting a shared doc.

A Google spokesperson told WIRED that the company is working on new security measures for detecting Google Drive spam. Threatpost has reached out to Google for further comment.
Click to expand...

Log in or Sign up

Phishers Using Google Drive to Trick People into Visiting Malicious Websites

guest Guest

Log in or Sign up

Phishers Using Google Drive to Trick People into Visiting Malicious Websites

guest Guest

Useful Searches