Go to the U of M home page

Tuesday, June 2, 2015

Phishing Example 102: I've shared an item with you

Received June 2015

From:
Date: Tue, Jun 2, 2015 at 7:17 AM
Subject: I've shared an item with you.
To:
     
Hello,

I just shared a document with you using Google Drive. To open this
document, go to hxxps://drive.google.com
<hxxp://xxxxxxxxx.com.br/platform/directory>  to view it and sign in
with your email address, as it is stored online.

Note: it's not an attachment, it's a document stored online.

Best Regards


Things to note:


  1. Sent from a compromised UMN account.
  2. Familiar fake Google-login page.
  3. Hosted at a .br (Brazil!) web address.
  4. Review our earlier post to see what logging into a UMN.EDU Google resource really looks like.