The scam works through the typical phishing formula. Those targeted receive an official-looking Google+ invite in their inbox, inviting them join the service. Unlike some fake emails, this particular phony invite is a reasonably accurate reproduction of the real thing; although the recent introduction of Google’s new social networking service makes it unlikely that most recipients have a clue as to what a real invite should look like.
Once clicked, however, the invite instead open an online pharmacy offering a wide variety of drugs that people may be embarrassed to buy or unable to afford, such as Viagra. There haven’t yet been any indication that the site is attempting to steal user information or that the site itself contains any browser exploits. Thankfully, this simple scam is annoying at its worst.
Still, this round of false invites points once again to the vulnerabilities inherent in social networks and tools. It’s easy to imagine that an email such of this could contain a more damaging payload, and it would no doubt be effective at capturing the attention of some users. Google’s decision to turn off invitations due to the incredible demand makes invites a valuable commodity that’s sure to attract curious eyes.
Source: Daily Mail Online