Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-04 Thread Braxton Colagross
The bad guys spoof 2FA prompts and steal those codes the same way as passwords. This example especially tough to catch because they're displaying a legit Google.com oauth login for an app called "Google Docs" that isn't Google Docs. This is also an old trick. The new one simply uses an oauth

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Joe Bernard
It's a bizarre coincidence that got me to open it. I'd had a problem with an ebike component so I sent it back..much emails..they fixed it and it just got back here a couple days ago. So when their address showed up this afternoon with a doc to open, I figured it was a warranty doc or

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Deacon Patrick
Here's the details: http://www.macworld.com/article/3194366/security/sneaky-gmail-phishing-attack-fools-with-fake-google-docs-app.html#tk.rss_all On Wednesday, May 3, 2017 at 1:40:19 PM UTC-6, Joe Bernard wrote: > > There's a massive phishing operation going on. If you see something from > me or

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Joe Bernard
Jeff, I tried Manage Apps. Google Docs is not listed as an app I use. -- You received this message because you are subscribed to the Google Groups "RBW Owners Bunch" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Tim Butterfield
It's a very good idea to never open the unexpected attachment without validation first. For reference, the Docusign phish emails I received yesterday look like this in gmail: Header: [image: Inline image 3] Body of email: [image: Inline image 1] On Wed, May 3, 2017 at 3:30 PM, Lee Legrand

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Tim Butterfield
There are tradeoffs with password storage approaches. 1Password lets you store them locally instead of in the cloud on a server controlled by someone else. LastPass stores them in the cloud, but the browser extensions validate the URL before recognizing the site for filling in the login page

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Lee Legrand
I never opened the doc because it looks so suspicious. Why would you send me a document and I hardly know you and it is not listed as part of any group. Thats why I never opened it. On Wed, May 3, 2017 at 6:14 PM, Joe Bernard wrote: > That's a good idea, Patrick. Thanks!

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Jeff Lesperance
Joe - you likely need to take further action - you can read more about the mechanics of this phishing attack here: https://www.theverge.com/2017/5/3/15534768/google-docs-phishing-attack-share-this-document-with-you-spam Where details about removing access to the offending app are detailed as

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Joe Bernard
That's a good idea, Patrick. Thanks! -- You received this message because you are subscribed to the Google Groups "RBW Owners Bunch" group. To unsubscribe from this group and stop receiving emails from it, send an email to rbw-owners-bunch+unsubscr...@googlegroups.com. To post to this group,

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Deacon Patrick
As a start, you may want to change your Google password. I use 1Password, which makes managing unique passwords ridiculously simple. Passwords look like this, even for one off sites I register with for whatever reason: xfrNemjHZWnAdFU3qUzQWXDN (not actually a password to anything, just showing

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Joe Bernard
Leah: I never figured out a fix, I assume it finally stopped bouncing to every damn person I've ever emailed. It's very upsetting. -- You received this message because you are subscribed to the Google Groups "RBW Owners Bunch" group. To unsubscribe from this group and stop receiving emails

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread LeahFoy
Checked out the Junk folder and indeed there was a Google Doc email from you, Joe. Creepy! What did you have to do to fix this? -- You received this message because you are subscribed to the Google Groups "RBW Owners Bunch" group. To unsubscribe from this group and stop receiving emails from

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Joe Bernard
I got one from a bike company that had just shipped me something, so I thought it was paperwork for it. I tried to open it and suddenly my email blew up with people asking me why I was sending them stuff. Not fun! -- You received this message because you are subscribed to the Google Groups

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread dougP
Thanks for the heads-up. Got one in my spam folder. dougP On Wednesday, May 3, 2017 at 12:40:19 PM UTC-7, Joe Bernard wrote: > > There's a massive phishing operation going on. If you see something from > me or any other list member requestion to open a Google Doc, don't touch it! -- You

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread sameness
Great, now I'm afraid my Google account is going to get hija -- You received this message because you are subscribed to the Google Groups "RBW Owners Bunch" group. To unsubscribe from this group and stop receiving emails from it, send an email to rbw-owners-bunch+unsubscr...@googlegroups.com.

Re: [RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Tim Butterfield
If you don't have 2 factor authentication on your google related accounts, you can add that here: https://www.google.com/landing/2step/ Tim On Wed, May 3, 2017 at 1:15 PM, Chris Birkenmaier wrote: > I was going to PM you to see if you were sending me something. Glad I >

[RBW] Re: DON'T OPEN GOOGLE DOC

2017-05-03 Thread Chris Birkenmaier
I was going to PM you to see if you were sending me something. Glad I didn't touch it. thanks for the heads up On Wednesday, May 3, 2017 at 3:40:19 PM UTC-4, Joe Bernard wrote: > > There's a massive phishing operation going on. If you see something from > me or any other list member