Google was the victim of a spam threat on the afternoon of May 3, 2017.
These spam messages showed up as Google Docs invitations reading “[Any Name] has invited you to view the following document.” The “to” field shows “firstname.lastname@example.org” in the majority of messages.
Recipients should delete any messages and not click the link in the body of the email.
Any Johnstown staff or student accounts affected by this spam have been remedied by our IT Department.
However, if you have clicked the link in the Google Doc’s invitation from a personal account, there are steps you must take to remove the resulting permissions on your Google account.
- From a web browser, sign into your Google Account.
- From your “My Account” page, select “Sign-in and Security”
- On the left-hand side click “Connected Apps & Sites”
- Remove “Google Docs” from the permissions list if present. (The legitimate Google Docs does not need this access)
Google has advised that passwords have not been compromised, and there is no need to change them. However, if you’d like to change your password for an additional layer of security, you may do so via the following steps:
- Click “Signing in to Google” on the left hand side of your screen (two option above the “Connected Apps Sites”)
- Under “Password and Sign-in method” click the arrow next to password. You’ll be prompted for your current password, followed by a prompt for a new score password of your choosing.