You are here

Recovering from the Google Doc phishing scam

Date:  5/3/17

Some University of Minnesota GMail accounts received emails with a subject line that says “[Name] has shared a document on Google Docs with you.” The addressee appears as “hhhhhhhhhhhhhh.”

These emails are phishing attacks. This was a widespread issue with Google that extended beyond the University of Minnesota. Google has resolved the issue.

If you opened the link you should take the following steps to revoke access to the application.

  1. Check the list of authorized apps for your Gmail account:
    Go to:
    - Click on the image of your profile
    - Select My Account
    - Click on Connected apps & sites
    - Click on Manage Apps
  2. Look for "Google Drive" and delete if found. There may be multiple entries, remove all of them.
  3. Look for "Google Docs" and delete if found.  There may be multiple entries, remove all of them.

If you also entered your username and password (and ONLY if you entered your credentials):

  1. When the password reset service is available - Reset your Internet password and/or shared secret at

    NOTE - Last updated: 5/5/2017 at 1:17pm
    If you need to reset your password, please try self-service first by going to and entering your Internet ID and answering the security question or, if you have an alternate email on file you may enter that. If you are unable to login to your computer, please try your old password first. If you still are unable to login to your computer but can login to email, MyU, etc. please try changing your password at If you are unable to change your password through self-service or you still cannot login to your computer with your old password or after a password reset please call Technology Help 24x7 at 612-301-4357

  2. Check your Google email filters and forwarding.

Contact  the ITSS TechCenter Help Desk if you need assistance with any of these steps