Details here:
[url= https://techcrunch.com/2017/05/03/psa-this-google-doc-scam-is-spreading-fast-and-will-email-everyone-you-know/ ]https://techcrunch.com/2017/05/03/psa-this-google-doc-scam-is-spreading-fast-and-will-email-everyone-you-know/[/url]
but essentially you get an email from a friend asking you to open a google doc and the link is actually to google so looks legit, you go to google and say 'yes I'd like to see the doc' and suddenly they have access to all of your emails and contacts.
Checked mine last night
You need to go
https://myaccount.google.com/intro/security?target=permissions#connectedapps
And remove permission (if it's there) for Google docs, if it's not listed you won't have been affected
Apparently this has now been fixed, the offending software has been removed.
Major oversight on Googles part when a third party developer is allowed to call their app Google docs.
