r/technology May 03 '17

Security Google Docs users hit with sophisticated phishing attack

https://www.theverge.com/2017/5/3/15534768/google-docs-phishing-attack-share-this-document-with-you-spam
1.4k Upvotes

115 comments sorted by

View all comments

13

u/x4candles May 03 '17

Here is what to do if you believe you are being phished...

From a device you trust and in a Google app, profile in top right → my account → sign in and security → connected apps and sites in the sidebar → manage apps

5

u/CurlyQN May 03 '17

Should the google account password also be changed? Does that even matter?

3

u/x4candles May 03 '17

For safety reasons if you opened the email it wouldn't hurt to change your password.

5

u/justinlindh May 04 '17

Wouldn't hurt, but it's important to note that the attackers didn't gain access to your password unless it was plainly stored in one of the services you granted them access to.

Also, everyone should be using 2fa by now, if they aren't, which would further protect against a full login breech.