![]() And because the email comes from Google, users trust that it is legitimate. The hack works because the email that is sent does not show the hackers' email address-just a name they designate. The symbol automatically alerts the system to send an email to the person designated in the email address-the email that is sent has phishing links in it, sending the user to a webpage that could lead to malicious code. ![]() The hacking approach is both simple and straightforward-a hacker creates a Google Docs document and adds comments to it that include an symbol followed by an email address. They further claim that the vulnerability was not fixed by Google and because of that they began seeing hackers taking advantage of the vulnerability last month. Then, this past October, they discovered that hackers had found another way to send phishing links to unsuspecting users, using the comment feature. The team at Avanan claims that they found an earlier exploit in Google Docs last June-one that allowed hackers to send phishing links to users.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |