Phishing Example 138:Hello

Received April 2016

From: *UMN User*< UMN-USER  @ umn.edu>
Date: Mon, Apr 4, 2016 at 8:25 AM
Subject: Hello
To:


I shared a document with you. Go to:

https://www .docusign .com <hxxp://bit.ly/-somebitly-address > and just sign in with

your email address to view the document.The file

is too large so I couldn't attach it let me know

what you think.

                            

Notes:

• Comes from a compromised UMN account
• Hides URL with bit.ly shortener
• Goes to bogus "docusign" login on a compromised website
• Most document sharing at the U is via Google Drive - IF you are already logged into Google to see your email,  you should NEVER see a login screen to get to the shared google doc.