Security Tip: If you are not expecting a shared document from Google Drive or Dropbox or Office 365 from outside the organization, use caution. If you are sharing a document using cloud services, also notify the recipient by another means of communication.

Tips for Detection:

• Sending address is @hotmail.com
• Many phishing emails attempt to impersonate the provost or academic department chairs
• The link does in fact lead to a legitimate document stored on Office 365, but the document asks the user to click another link to a malicious site (not shown)

Original Phishing Message:

Text of Phishing Message:

Mail Serv. shared a file with you

Kindly check the new school transcript. Laura L. Behling Provost University of Puget Sound

Open [link removed]