SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: Ron who wrote (96458)5/6/2017 9:20:37 AM
From: goldworldnet5 Recommendations

Recommended By
Ken Adams
locogringo
Ron
SI Ron (Crazy Music Man)
Zen Dollar Round

  Read Replies (1) | Respond to of 110644
 
Google details how it clamped down on massive phishing scam
The company shut down the attack, which masked itself as a Google Doc invitation, within an hour.

CNET Security -- May 5, 2017
cnet.com

The internet was a flurry Wednesday over a sophisticated phishing scam that was circulating around to Google users.

With the aim to steal access to users' accounts, the attack was masked as an invitation to open a Google Doc. Victims were asked to open a document, which would unknowingly grant permissions to their accounts. The scheme would then employ a technique called Open Authorization (OAuth) that used emails in a user's contact list to continue spreading itself. ( Click here for CNET's full Google Doc phishing explained.)

In a statement on Friday, Google's Mark Risher said the company shut down the campaign within an hour. It removed the rogue app's fake pages and applications, updated user protection in Gmail and the Google Cloud Platform and "re-secured affected accounts." Risher noted that fewer than 0.1 percent of users were affected by the scam.

To avoid this situation in the future, Google is also updating how it will handle OAuth applications, its anti-spam systems and how it will deal with third-party apps that want to request user info.

Google didn't immediately respond to a request for comment.

* * *