[All] Phishing attack disguised as Google docs sharing

[Chirica, Dan C. (ARC-SGG)[Bay Area Environmental Research Institute]]

https://www.wired.com/2017/05/dont-open-google-doc-unless-youre-positive-legit/

In the last few days, there has been a sophisticated phishing scam that is being sent out via email.

The email is asking you to click on a link to view a document.
DO NOT CLICK ON THE LINK.

This scam utilizes Google Docs to trick users into granting permission to a third-party application. THIS IS THE TELLTALE SIGN. SHARING A GOOGLE DOC SHOULD NOT ASK FOR PERMISSIONS TO YOUR ADDRESS BOOK.
This application could then take over your email client and address book, sending out further spam and malicious programs.

This should be more of a problem for personal Gmail accounts. The NASA Google docs does not implement email and contacts.

Let me know if you have any questions.
Thank you.

Sent from my iPhone
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://espo.nasa.gov/pipermail/all/attachments/20170506/04800f4a/attachment-0002.html>