Go to the U of M home page

Monday, November 7, 2016

Example 168: Kxxxx Hxxxx has shared the following document

PDF "from" non U source with PDF linked to fake google doc login
Received November 2017

Things to note

  • Attachment contains a PDF - only to deliver a link to a fake Google login
  • Google login (not *at* google.com) presents multiple email provider choices - Google doesn't do that
  • "Logging in" to form presents Adobe error message, no document.


Message Text:
From:
Date: Mon, Nov 7, 2016 at 5:41 AM
Subject: Kxxxx Hxxxx has shared the following document 
To:

Hi,
Kindly review the attached file report urgently.
FReportbook504.pdf
Regards.
Google Drive: Have all your files within reach from any device. 

PDF with link to login form
PDF containing phishing form URL link
PDF containing phishing form URL link



Fake Login Choices
Fake Google multiple email choice login
Fake Google multiple email choice login - Google DOES NOT do this

Fake Login Form

Non-Standard Google Login Form
Non-Standard Google Login Form

"Error" message following login

Error presented after login
Error presented after login


No comments:

Post a Comment

Note: Only a member of this blog may post a comment.