Don't Get Hooked: Lessons From Yesterday's Phishing Scheme

Faegre Drinker Biddle & Reath LLP
Contact

Faegre Baker Daniels

On May 3, a new phishing scheme ravaged school districts, colleges, universities and media companies. The scheme uses a convincing imitation of an email Google Docs invitation — often received from someone with a seemingly legitimate email address — to prey on individuals who frequently share files and collaborate with each other using Google Docs. The apparent aim of the scheme is to send spam to contact lists and steal credentials, such as usernames and passwords. Users should not click on the “Open in Docs” button and should delete the email immediately. If they did click, they may need to go to Google’s “Connected Apps and Sites” page and revoke access to the app deceptively named “Google Docs.” See below for an example of the email.

Google Docs Scam

This attack is a good reminder that cybersecurity is a matter that requires constant vigilance and cannot be achieved through a single silver bullet. Organizations must have “defense in depth” when it comes to cybersecurity. In-house counsel can do its part by working with their advisors and IT, HR and communications departments (among others) to ensure that their organizations regularly:

  1. Provide employees and customers with alerts and training about the latest schemes
  2. Update the organization’s Incident Response Plan to reflect new threats and vulnerabilities
  3. Run “table top” or war game exercises to test the organization’s ability to respond to real-world incidents
  4. Review vendor contracts and conduct appropriate audits of third-party privacy and security practices
  5. Conduct risk assessments and review full privacy and cybersecurity programs
  6. Review the organization’s legal compliance with changing privacy and cybersecurity laws

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Faegre Drinker Biddle & Reath LLP | Attorney Advertising

Written by:

Faegre Drinker Biddle & Reath LLP
Contact
more
less

Faegre Drinker Biddle & Reath LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.