{"id":342,"date":"2017-05-03T19:04:25","date_gmt":"2017-05-03T23:04:25","guid":{"rendered":"http:\/\/pages.vassar.edu\/catchoftheday\/?p=342"},"modified":"2017-05-03T19:15:41","modified_gmt":"2017-05-03T23:15:41","slug":"matthew-vassar-has-shared-a-document-on-google-docs-with-you","status":"publish","type":"post","link":"https:\/\/pages.vassar.edu\/catchoftheday\/matthew-vassar-has-shared-a-document-on-google-docs-with-you\/","title":{"rendered":"Matthew Vassar has shared a document on Google Docs with you"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-343\" style=\"border: 2px solid #0000ff;padding: 1px;margin: 1px\" src=\"http:\/\/pages.vassar.edu\/catchoftheday\/files\/2017\/05\/May3OpenInDocs.jpg\" alt=\"\" width=\"600\" height=\"250\" srcset=\"https:\/\/pages.vassar.edu\/catchoftheday\/files\/2017\/05\/May3OpenInDocs.jpg 600w, https:\/\/pages.vassar.edu\/catchoftheday\/files\/2017\/05\/May3OpenInDocs-300x125.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<h2>Why this looks valid<\/h2>\n<ul>\n<li style=\"font-weight: 400\">The email may appear to be from an actual Vassar user.<\/li>\n<li style=\"font-weight: 400\">The email includes an invitation to open a Google Doc, which is a Vassar service.<\/li>\n<\/ul>\n<h2>Why this is phishing<\/h2>\n<ul>\n<li style=\"font-weight: 400\">The subject line is suspicious.\u00a0 A normal sharing notification from Google would have the full document title in the subject line.<\/li>\n<li style=\"font-weight: 400\">The &#8220;to:&#8221; address is suspect.\u00a0 &#8220;mailinator&#8221; is a disposable email service, where users can create fly-by email addresses that cannot be accessed, cannot send mail, and any received email is deleted.<\/li>\n<li style=\"font-weight: 400\">A normal sharing notification from Google would have the name of the document in the body as well.<\/li>\n<li style=\"font-weight: 400\">When clicking on the link, a user is asked to allow access to email and contact information in Google mail.\u00a0 This would never happen from a valid Google share.<\/li>\n<\/ul>\n<h2>Additional notes<\/h2>\n<ul>\n<li style=\"font-weight: 400\">This is an extremely dangerous phishing attempt. If you clicked on this link and allowed access to your Google mail, please contact the Service Desk immediately at x7224 or servicedesk@vassar.edu.<\/li>\n<li style=\"font-weight: 400\">This phishing attempt was widespread and widely reported.\u00a0 There is an overview of the incident here:\u00a0 <a href=\"http:\/\/money.cnn.com\/2017\/05\/03\/technology\/google-docs-phishing-attack\/index.html\">http:\/\/money.cnn.com\/2017\/05\/03\/technology\/google-docs-phishing-attack\/index.html<\/a><\/li>\n<li style=\"font-weight: 400\">A phone call to the alleged sender would quickly verify if this is a legitimate email. It only takes a few minutes to pick up the phone!<\/li>\n<li style=\"font-weight: 400\">Report it as phishing to Google. Before deleting the message, make sure to click on \u201creport phishing&#8221;.<\/li>\n<li style=\"font-weight: 400\">A little paranoia goes a long way! Be suspicious of any email messages similar to this one.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp;<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[80936],"tags":[],"class_list":["post-342","post","type-post","status-publish","format-standard","hentry","category-phishing"],"_links":{"self":[{"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/posts\/342","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/comments?post=342"}],"version-history":[{"count":3,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/posts\/342\/revisions"}],"predecessor-version":[{"id":346,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/posts\/342\/revisions\/346"}],"wp:attachment":[{"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/media?parent=342"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/categories?post=342"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pages.vassar.edu\/catchoftheday\/wp-json\/wp\/v2\/tags?post=342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}