An exploit vector in Google Docs that attackers are using to deliver malicious phishing. Hackers are bypassing static link scanners by hosting their attacks in publicly known services.

https://www.avanan.com/blog/attackers-take-advantage-of-new-google-doc-exploit