Phishing Example 139: Xxxxxx Yyyyy MD sent you an attachment

Received April 2016

From: Xxxxxx Yyyyyy MD <Compromised USER @umn.edu>
Date: Fri, Apr 22, 2016 at 1:02 PM
Subject: Xxxxxx Yyyyyy MD sent you an attachment
To:

Attachment for you to view <hxxp:// google.com/>
Open <hxxp://www.xxxxengineers.com/Attchement%20235%20pdf.htm>

THINGS TO NOTE:

•     Comes from a compromised UMN.EDU account (that doesn't match the "from:" name)
•     Fake Dropbox login (Dropbox doesn't offer a menu of email providers)
•     Says it's a google.com doc AND provides a Dropbox login