Users who have received a legitimate-looking Google Docs link in their Gmail accounts may be potential victims of a sophisticated phishing attack that has been making the rounds recently. The scam is highly effective due to its perpetrator’s use of a third party application which is cleverly disguised as the Google Docs app—making it more difficult to detect than typical phishing scams.

https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/attack-uses-fake-google-docs-application-to-access-gmail-accounts