I accidentally opened up a spam mail containing a google drive sheet with a macro on my Galaxy S8 phone. The spam email goes something like:
Headline: "Need action! Withdrawing Funds id - (some ID number)"
Body: "you got 6 hours to withdraw BTC from your account. All information attached in the link."
And then it contained a link to the spreadsheet. The author "tagged" me and some other people in a comment on the file like "@[email protected]".
The reason I accidentally opened the file was due to the fact that a "drive" notification popped up on my Galaxy S8 phone. I instantly realized what happened when it opened and quickly closed the app, reset my password for my gmail and logged out of a few things on my phone. I also (reported the sheet as malware to Google) and then panic deleted the sheet file that was now on my drive (and said "opened by you today at 6:00").
I am panicking because I am not tech-savvy and I don't know what to do. I have a few questions:
Do Google Drive macros work on an Android phone?
What are the right steps in order to prevent identity theft or anything else? I am willing to go far to protect myself.
I did not open the spreadsheet on my PC, but I reported it and deleted it from my PC. Sadly, I deleted everything including the corresponding spam email, so I don't have much for you to go on, other than it looked like a typical spam email and was reported as spam by Gmail (I've gotten a similar spam email looking exactly like the one I opened).
The email looked very similar to this one in the picture below.
My hypothesis is that the macro in the spreadsheet is either a phishing attempt on stealing your cryptowallet details or something in regards to cryptocurrency. However, I am scared that it might be able to steal other things from my Phone (Notes, pictures, "password cookies" from apps like Dropbox?).