Phishing Scams On The Rise: Now on Google Docs

August 3, 2023

Google Docs Phishing Scam Bypasses Detection Measures

It has come to light that a new Google Docs phishing scam has been identified by cybersecurity software company Check Point. The scam, which experts call an evolution of BEC (business email compromise) 3.0, can bypass detection measures and reach victims' inboxes. This is done maliciously using legitimate sites to gain access to a target's mailbox.

A Threat to Businesses

With many companies now using Google Workspace's office software, this phishing scam can potentially reach many businesses. The attackers simply create a Google Doc to embed various malicious elements, including phishing links and URLs leading to malware. By sharing the document through the typical Google Drive process, the email arrives via a genuine Google email address and domain, making it harder for victims to identify it as an attack.

As this type of BEC attack uses a form of social engineering that leverages a trusted service provider (in this case, Google) and a trusted process (document sharing), detection and prevention tools are more likely to trust emails from genuine services like Google.

What Can You Do to Protect Your Business?

Google has already implemented numerous layers of protection to combat these tactics, including built-in warnings in Docs and automatic scans in Drive that block most phishing attempts. However, Check Point advises security professionals to implement new and advanced measures that use artificial intelligence to spot multiple phishing indicators. File scanning software is also a good idea, as is URL protection.

At HUB Technology Solutions, we understand the importance of staying up-to-date with the latest cybersecurity threats and implementing advanced measures to protect our client's data. If you need help assessing your cybersecurity measures, don't hesitate to contact us at 204-772-8822 or send an email to solutions@hub.ca

View More