Sending Google Drive links with dangerous content is a particularly insidious method of phishing.
Cybercriminals are currently using Google Drive for scams. However, this is particularly perfidious because the notifications come from Google itself.
[mk_ad]
Invitation to collaborate via Google Drive
Phishing emails that claim to come from a known sender are now commonplace. You know which features to look out for. You know the suspicious signs and be careful not to click on buttons or links carelessly.
But this scam is sneaky.
You will receive a message inviting you to collaborate on a Google Drive document. For example, on an Android phone you receive a push notification that comes directly from Google. So you carelessly follow the link to the document in question, which in turn contains a link to a malicious website or the download of malicious software.
If you do not expect such an invitation, any doubts that may exist will be removed by receiving a second confirmation. This takes place as an email from Google Drive with an invitation to the same document.
Confirmed twice, and both times directly from Google – you feel safe here.
Spam filters have no chance
As Wired reports, cybercriminals are looking for possible ways to bypass spam filters in email programs. By exploiting this loophole in Google Drive, they found such a way.
Russian cyber criminals are currently looking through numerous Gmail accounts in order to lure their owners with their scam.
Many of the affected Gmail addresses are said to come from data leaks from various websites or services. In most cases, a professional connection is assumed, as collaboration on a shared Google Drive document is most likely and least suspicious.
Google is working to stop this scam, but the various protective measures have not yet been 100% successful. Google is continuing its work here to also recognize spam that is sent via Google Drive.
How to protect yourself
First of all, you should never click on links when you receive an email or notification from someone you don't know.
In this particular case, it is also helpful to ask the alleged sender if you are not expecting an invitation to collaborate on a shared document. And as with other scam emails, you can also pay attention to spelling and grammatical errors caused by automated translations.
Source: futurezone.at
Article image: Shutterstock / By rafapress
Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )