Our support team is getting spammed a lot from our customers. We're in the education space, and it's spreading pretty quick. On initial inspection the URL look

Our support team is getting spammed a lot from our customers. We're in the education space, and it's spreading pretty quick. On initial inspection the URL looks harmless, but it's got some malicious params in there, mainly redirect_uri=https%3A%2F%2Fgoogledocs.g-docs.win%2Fg.php It appears to request read/send access to your email, and then spam all your contacts