Google Doc Hack

[AKKOLADE]

Since so many tournaments are run via Google Docs, everyone should be aware that there is a particularly potent phishing scheme going around as a fake invitation to edit a Google Doc.

[1992 in spaceflight]

I've gotten this email on the three different emails I use for quizbowl purposes, so please be careful if you get this email! If you accidentally click on it, make sure you hit Deny.

[Victor Prieto]

I also got hit by this today, looked just like this:

[El Salvadoreno]

What is particularly nasty about this hack is that if you open the e-mail, it spreads the e-mail to all your contacts so the e-mail cannot be shared under any circumstances. The way to delete without opening it is to check (as in, check the box next to) the e-mail, move to spam, check it again, and delete forever. This should delete the emails without your personals being taken or the email spreading.

[Auks Ran Ova]

What is particularly nasty about this hack is that if you open the e-mail, it spreads the e-mail to all your contacts so the e-mail cannot be shared under any circumstances. The way to delete without opening it is to check (as in, check the box next to) the e-mail, move to spam, check it again, and delete forever. This should delete the emails without your personals being taken or the email spreading.

I don't believe it's possible for an email to work in such a way (i.e., magically forwarding itself after only having been opened). Is there a source that suggests otherwise?

[El Salvadoreno]

What is particularly nasty about this hack is that if you open the e-mail, it spreads the e-mail to all your contacts so the e-mail cannot be shared under any circumstances. The way to delete without opening it is to check (as in, check the box next to) the e-mail, move to spam, check it again, and delete forever. This should delete the emails without your personals being taken or the email spreading.

I don't believe it's possible for an email to work in such a way (i.e., magically forwarding itself after only having been opened). Is there a source that suggests otherwise?

Okay, so from some (admittedly quick) research, it is not opening the e-mail but attempting to open the "doc" that causes it to spread (source CNN). Given this, I am not sure this is necessary, but extra precautions never hurt anybody.

[Dantooine is Big!]

What is particularly nasty about this hack is that if you open the e-mail, it spreads the e-mail to all your contacts so the e-mail cannot be shared under any circumstances. The way to delete without opening it is to check (as in, check the box next to) the e-mail, move to spam, check it again, and delete forever. This should delete the emails without your personals being taken or the email spreading.

I don't believe it's possible for an email to work in such a way (i.e., magically forwarding itself after only having been opened). Is there a source that suggests otherwise?

No, I don't think so – as far as I know, the actual way the worm spreads is when you click the "open" button, after which you're taken to a real google account login prompt that lists all the google accounts you have accessed on your computer so far. Then, it prompts you to give "Google Docs" access to your account, which is not actually google docs, but instead emails all of your contacts with the same email. (I speak from personal experience whoops) It looks like google has also shut down the fake "Google Docs" service and anything else relating to it

edit: ninja'd