Widespread Phishing Attack on Google Docs

Beware of Emails Saying Someone Wants to Share a Google Doc with You

A phishing attack has been deployed at many universities (and possibly beyond) that use Google. You may see a message purporting to share a Google Doc with you that comes from someone you know.  It shows you a button to click. DO NOT Click on this button. If you do then the email will be shared with those in your contact list.

We are blocking the originating email address, and have blocked several domains involved.
Google is working to mark the email as spam.

WHAT YOU SHOULD DO IF YOU CLICKED ON IT:
1. Go to https://myaccount.google.com/security#connectedapps
2. Click on Manage Apps
3. If you see “Google Docs”, click Delete
4. Change your NYU password as soon as possible via https://start.nyu.edu (this should not be necessary but as we are still gathering information about the severity of this, it will be wise)

NOTE: Step 3 does NOT delete your Google documents. “Google Docs”, if it shows up on this list of apps, it is not a real app.

Please call the IT Service Desk at 212/998-3333 or email AskIT@nyu.edu if you need assistance.