Original Phishing Message

From: SharePoint Online <no-reply[@]sharepointonline[.]com>
Subject: Nicolas LANDRY shared “University of Puget Sound December Appointment Notice” with you

Tips for Detection

• This email was sent using Microsoft SharePoint. Attackers commonly use legitimate services to share documents that may contain a link to a malicious site or attachment. Always use caution opening secondary links in these shared documents or downloading files.
• The sender attempts to impersonate the president, but notice that the actual sender account name does not match.

Text of Phishing Message

From: SharePoint Online <no-reply[@]sharepointonline[.]com>
Subject: Nicolas LANDRY shared “University of Puget Sound December Appointment Notice” with you

Nicolas LANDRY shared a file with you

President Isiaah Crawford sent you a file

University of Puget Sound December Appointment Notice

This link only works for the direct recipients of this message.

Open