Phishing E-mail Carrying Corrupt Google Docs Hitting Subscribers of Gmail
As accords to Sophos the security company, one fresh phishing e-mail scam is aiming at people with Gmail accounts as it carries malevolent Google Docs.
The fraudulent e-mails, exhibiting the caption "Secure Document," greets the recipient while telling him that his financial institute dispatched him one secure document utilizing Google Docs. For reading that document, he should click a given web-link and access the Google Docs page. The document has been described as important. Finally, signing off from The Gmail Group, the message pays regards and wishes happy emailing.
But according to Chester Wisniewski, Senior Security Advisor with the security company Sophos, while the assault is fundamentally principled, it's risky since the message uses cunning social engineering for making itself appear genuine as also utilizes one non-standardized infection technique. V3.co.uk reported this dated August 29, 2013.
Wisniewski further states that while people like him within the security industry mayn't feel astonished, phishing assaults keep on proving as a highly successful method for eluding conventional defenses. As numerous companies adopt Google cloud, such entices through phishing tactics will keep on giving dividends to the perpetrators.
Wisniewski explains that for many enterprises that rely on Google as well as other vendors of cloud for facilitating crucial IT services, this may sound quite believable, initially.
Apparently, for victims of the assault, they are led onto a phishing website based within Thailand that tries fooling them so they would divulge their passwords related to different online services.
And besides soliciting the victims' Google credentials, the website further states it'll accept their Hotmail, Verizon, Outlook.com, Yahoo, 163.com, Comcast, AOL, alternatively any other electronic mail A/C credentials. Once entered, these details will be transmitted to hijacked online systems to serve the thugs any desired objectives, Wisniewski writes. Nakedsecurity.sophos.com published this dated August 29, 2013.
Meanwhile, in similar phishing e-mail scams exploiting Google Docs, during January 2012, Sophos identified 2 separate spam runs that utilized Google Docs. The first run attacked Australian ANZ Bank customers, while the second run targeted visitors of certain North American school's website, wherein the Google service was hosted in the related phishing questionnaires.
» SPAMfighter News - 9/6/2013