Once the link in the email was pressed, users were directed to a real Google account permissions page where the phishing software, a third-party app named "Google Docs", requested access to the user's Google account.
Setelah tautan di surel ditekan, pengguna diarahkan ke halaman izin akun Google yang sebenarnya tempat perangkat lunak phising, aplikasi pihak ketiga bernama "Google Docs", meminta akses ke akun Google pengguna.