Phishing scams based on document sharing: "Shared An Important Documentation (PREVIEW)"

News

A recent batch of phishing scams prey on people who share documents through collaboration tools such as Office 365's OneDrive, D2, DropBox and others. One reported recently contains the subject "Shared An Important Document (PREVIEW)", and the body contains a link to OPEN FOLDER.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

Note that there may be other phishing emails of a similar nature, with varying subject and body text. Please use caution when opening all emails that appear to be coming from a document management system, especially if you are not expecting a document, or if the subject and body do not specifically relate to a topic you are working on.

Tip for those sharing documents:
Enter a description of the document with sufficient detail; do not rely on the generic description provided by the document management tool.


Example of this phishing message:

Sender name & address: <looks like a valid McGill person>
Subject: Shared An Important Document (PREVIEW)

Good Afternoon

I shared and important document with you ,You can easily access the documents Here

 

Let me know what you think, And have a Great Weekend

Best wishes,

--- Signature ---


What to do next

 If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please itsupport [at] mcgill.ca (contact the IT Service Desk) immediately to report the phishing attempt.

Quick links: