Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Sunday November 06 2016, @06:52PM   Printer-friendly
from the spammers-should-be-drawn-and-quartered dept.

In the last several weeks I've been getting spam via my Google Drive Account.

It seems someone can share a document with you knowing nothing more than that you have a Google Email Account.
They simply put some spam in a folder, and then share that widely to thousands of Google users.

The files sit in their google drive, not yours. And you don't have to click on them. But if you do, who knows what sort of malware can be hidden in there.

If you have the Google Drive App installed on your Android device, it wants to notify you about each new item shared with you.

So the app, running on your phone dutifully opens the shared item, and shows you a thumbnail. And if you tap the notification it takes you right into the Google Drive app, and opens that unknown shared item and shows text and images to you.

By the time you realize how dumb that tap was the damage could already be done.

[Continues...]

In the mean time you are greeted by this:

from: gr5rc/Digital signage/... (via Google Drive) ...drive-shares-noreply@google.com...
reply-to: "gr5rc/Digital signage/..." gr5rc@domain removed by frojack
Dear Sirs,

From internet we know you are leading on AV/TV product reseller field.

Sysview is a digital signage software, capable change your existing smart TV to a digital signage . Sysview features following :

Value add
Based on your existing smart TV, no need buy any hardware
Easy use
No need install any hardware or software ,everyone can do.
Setup your own brand easily
White label or your re-brand, depend on your choice
Easy management
Multi levels account and authority , make manage up to 1000 screens easily
Cost friendly
One time charge, No monthly/Annual Fees

90 days free trial account is available now.

Try this freely now.

Best Regards

Anna Wang
Manager | Sales department No.3 Section
Nanshan, Shenzhen, China

The only way to prevent the notification tap from launching the item is to disable notifications for the entire Google Drive app on your phone. There is apparently no way to block random people from sharing single documents or entire folders with your Google account

So far this had only been used for spam, as far as anyone knows.

There is a lengthy thread on Google's Product forum which Google is ignoring.

Have any other Soylentils seen these Google Drive "gifts" on their Android Devices?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Funny) by Anonymous Coward on Sunday November 06 2016, @10:26PM

    by Anonymous Coward on Sunday November 06 2016, @10:26PM (#423285)

    a credible alternative to Microsoft Office

    Starting Score:    0  points
    Moderation   +5  
       Insightful=1, Funny=4, Total=5
    Extra 'Funny' Modifier   0  

    Total Score:   5  
  • (Score: 2) by bob_super on Monday November 07 2016, @06:16PM

    by bob_super (1357) on Monday November 07 2016, @06:16PM (#423659)

    Microsoft's lawyers are already drafting the lawsuit. Such clear plagiarism is a slam dunk compared to rounded corners.