Phishing Sites Hosted on Google's Servers

http://www.f-secure.com/weblog/archives/00002168.html

by nowsourcing • 15 years ago

23 8 15 years ago

kmfrk• 15 years ago

At the very bottom of the post:

"We got contacted by a Google employee. They informed us that, surprisingly, the questionable page is indeed the official Google form to request Google Voice account transfer. They also told us to remove all references to the form in this blog post. But I'm afraid we can't do that."

sharjeel• 15 years ago

That actually is more troublesome as it is now impossible to distinguish between a legitimate form and a phished one.

stretchwithme2• 15 years ago

yep. Don't know what they're thinking over there.

They'll probably start putting up a disclaimer when its not actually google's doc

wnoise• 15 years ago

I'd like to know how they verified it was a Google employee, and not a brazen phisher.

reaganing• 15 years ago

I've used the Google Voice form they used in their example long ago. It was legitimate and worked just fine.

But I'm not surprised to see some people would use forms on Google Spreadsheets for phishing attacks. Seems ideal.

tesseract• 15 years ago

I have been refraining from doing so as I cannot shake the suspicion that it might be a phishing attack. It doesn't help that most links to it seem to be from Google Groups and other discussion type sites, sometimes posted by people claiming to be Google employees, sometimes not.

wladimir• 15 years ago

Even if it is genuine, it's a bad idea. Someone could make an exact clone of that site, on the same server (simply make a similar Google Spreadsheet) and go fishin'. Only the hash id at the end of the URL would be different.

Phishing Sites Hosted on Google's Servers

Related Stories