

A legitimate sharing request, shown below, includes the Google logo and other information.I am using a Google App Script to automate the creation of some Google Accounts inside our of our domain.

This process revokes the permissions to your email account(s) that the scam enabled.Ī quick step-by-step video on how to remove malicious apps from your Google account is available on FIT’s Cybersafe website. Repeat this action with other Gmail accounts you may have. Navigate to your Google account permissions page through this link: Ĭarefully select the app “Google Docs” (not Google Drive) by clicking on the app name and then clicking on the blue “Remove” button.If you use the same password for any other accounts, please be sure to change those passwords too. If it’s your FIT account, follow the instructions here. Change the password on the affected email account.Instead report it as phishing and simply delete the message. If you have received one of these emails, do not click on the Open button in the body of the email.This is an indicator that the email is part of the scam. Please note the multi “hhh” string in the “To” field. When individuals clicked the link, they were redirected to a fake Google permission page which granted the cyber criminals the ability to send out additional emails using your email address (FIT or personal).īelow is an example of a scam email (the sender’s name has been redacted). This was a nationwide email phishing scam that lured the reader to click on an “Open in Docs” button. Yesterday, you may have received invitations in either your FIT or personal Gmail accounts to share a Google Drive document from a recognizable name at FIT, mailing list you belong to, or personal contact.
