Davidson, along with the internet at large, is experiencing a major phishing attack that is targeting Google accounts. This presents a very serious and immediate risk to your privacy, your data, and possibly to Davidson College’s data. Please read this message in full and contact Davidson ITS (704-894-2900) with any questions.
The phishing email looks like it comes from someone you know and may be sent to firstname.lastname@example.org with a copy to you. It invites you to view a Google Doc. See an example below:
The link you follow takes you to either a Google sign-in page or a Google access rights/permission page, depending on whether you are logged into a Google account on your device. While these pages are actual Google pages, they invite you to grant access to a malicious application.
If you clicked the “Allow” button as shown in the image below, a malicious party will have access to your email account and Google Drive. It is very important that you DO NOT grant access or click “Allow.”
If you did click “Allow” —
If you granted access to a malicious application from your Davidson Google account, you must contact Davidson ITS at 704-894-2900 to inform us. An ITS staff member will need to evaluate the data in your Google Drive and Gmail.
Information Technology Services