Discovered a new Google Docs Spreadsheet email scam

Had an interesting morning with Sunil (Exchange Guru) today at work with an email being sent from a https://spreadsheets.google.com/xxxxxxx url.

Whilst we have not clicked on it other users have and this has then triggered internal emails being sent from her email address book at a rate of about 30 a minute through one of the company email servers.

Eventually the user owned up to filling out a bogus form which was launched from the Google spreadsheet!

If you see this email below DO NOT click the ‘CLICKING HERE‘ link which would be a link to the infected spreadsheet / site.

Email details

Subject:  532 MB
Content:

Your mailbox is becoming too large. The current size is 532 MB.
Please reduce your mailbox size by CLICKING HERE.

Solution:

  1. If you have users that have already clicked it, check your Exchange server tracking logs for emails sent from that user.
  2. Change the password on the mailbox and recreate a new mailbox for the user as a precautionary measure.
  3. Send out an email warning users that ICT will never ask for their password, without prior warning.

Bye for now!

Leave a Comment

Your email address will not be published.

Follow

Get every new post on this blog delivered to your Inbox.

Join other followers: