Rogue app grabs contacts, peeks at inbox, spams contacts
If you get an email today with the header that someone wants to share a Google document with you, don’t click it, otherwise you’ll be handing over your contacts to an unknown attacker.
The assault appears to have kicked off early on Wednesday morning. The Google Docs link looks legit because apparently no one at Google thought to block someone calling their app Google Docs. Once clicked, the user will be asked to grant permissions to Docs that it doesn’t usually request and has no need for – such as providing the ability to manage your account and to read or send Gmails on your behalf.
Powered by WPeMatico