Some complete assholes have unleashed hell in the form a fairly sophisticated and convincing email phishing scam, and it looks like they’re targeting the media.
A whole lot of email users have reported receiving the emails, including journos from Vice, BuzzFee and New York Magazine. According to these reports, the invitation to view a seemingly innocuous Google Docs file looks scarily legit, but is actually fake as heck.
According to the EFF, the attack is not intended to dish out malware, but rather to hijack the credentials of the target.
When the link is clicked, recipients are sent to a website that looks almost identical to the actual Google Docs screen, right down to the company’s recent design changes. It even asks which account you’d like to login with.
The URL even looks like something Google would spit out. You can check out how it all looks in the tweet below.
@zeynep Just got this as well. Super sophisticated. pic.twitter.com/l6c1ljSFIX
— Zach Latta (@zachlatta) May 3, 2017
Luckily, there’s a few ways you can tell if the email you got is the bung one. First of all, it’ll be addressed to “hhhhhhhhhh” and I’d hazard a guess that you know absolutely no one with that name, so keep an eye on that. The email itself looks a little bit off, too. Slightly different to what Google usually sends.
The fact Twitter is crawling with similar accounts of the same email is a dead giveaway too, so if you see anything similar in your own inbox, delete that shit, pronto.
Who exactly is behind the attack is still unclear at this stage, but I think we can all agree that they can go straight to hell.
Stay safe on-the-line, folks.
Source: Gizmodo.
Photo: The Simpsons.
