Bob hasn’t just forfeited his Google account login details and left himself extremely vulnerable to identity theft – his account has also been hijacked to distribute the scam to other vulnerable victims.Ĭlicking the ‘click to view’ button takes you through to a phishing website which looks like a legitimate Google login screen. MailGuard can make the assumption that Bob received the initial spear phishing email from someone within his address book that was previously compromised by the same Google Drive invitation. Considering we have blocked all details for the privacy of this compromised user, we will refer to this person as ‘Bob’.īob has had his email address compromised, possibly through the same phishing attack as that described above. In the example above, the email appears to originate from a sender that recipients may be expecting to hear from, or trust in accepting information from. Here is a screenshot of the type of email to watch out for: A large scale phishing email attack is currently circulating, purporting to be a “secure document’ distributed by compromised users. Spear phishing scams prove successful as they appear to be from individuals or businesses you know and trust.

Google drive for desktop scam