No link to story available
TidBITS reports [tidbits.com] on a malicious e-mail
[...] that appeared to be an invitation from a known correspondent to join a Google Doc. However, the linked Web page requested that you grant access to an app that looked like Google Docs, but was instead an app that sent spam to people in your contact list.
According to Google, "no other data was exposed" besides the contact lists and the attack was stopped after about an hour, with "fewer than 0.1 percent" of Google Mail (Gmail) users affected.
additional coverage: