A phishing attack is underway against several Gmail accounts. In fact, users are receiving a spam email in their inbox in which the invitation to share a document on Google Docs is simulated which, once opened, allows the sender to steal the account credentials.
To confirm the phishing intrusion attempt is Google itself, owner of the Gmail email system, confirmed the problem in a post and invited users not to open the emails in question and reported the phishing to Gmail. Google has announced that it has "deactivated the malicious account" and that it has "sent updates to all users", but this does not mean that users are now totally safe from any dangers.
Fraudulent emails contain a virus capable of copying the entire correspondence history and automatically spreading to other contacts. They seem to be sent by Google asking to open a "Google Docs" attachment, which leads to a fake app that steals data. About one million people have been affected to date, or 0,1% of total Gmail users.
This time the attack is particularly credible: the sender's name may correspond to a contact that we might actually know, but going into detail it turns out that the sender's "hhhhhhhhhhhhhhhh@mailinator.com" email address is suspicious. To prevent phishing from being successful, you must therefore be careful and never open the emails in question.
