Last week’s Google Docs phishing attack went big across social media.  Google stresses that the May 3rd attack didn’t do much damage. Fewer than 0.1 percent of its users were affected, it says.

The internet pioneer already has a list of anti-phishing measures, such as machine learning-based detection, Safe Browsing, email attachment scanning and extra security measures for suspicious-looking logins.

The company works to protect Gmail users against phishing attacks, and has explained how its systems work.

Google Docs phishing scam highlights the importance of safe email habits

 

In this incident, as part of the phishing attempt, users received an email with an invite to a Google Doc that appeared to be from a person they would know. The email then directs users to authorize a fake Google app that’s hosted on an actual Google page. Once the app is authorized, the attacker can then draw from a user’s contacts to send the offending email to even more people.

Establishing some security key alternatively dual-factor authentication can heighten the security of one’s Google account and this is what we recommend you to do.