Original Phishing Email
From: Eric Estep (via Google Docs) <drive-shares-dm-noreply[@]google[.]com>
Subject: Document shared with you: “EMPLOYEE REVIEW”
Where Did the Link Lead
The link goes to a document hosted on Google Drive. Many phishing emails may utilize legitimate cloud services such as Google or OneDrive to make the links appear trusted.
The document then links to a form using another legitimate cloud service, Jotform, asking for your email and password. Never enter your credentials or sensitive information on web forms or on websites you do not recognize.
Text of Phishing Message
From: Eric Estep (via Google Docs) <drive-shares-dm-noreply[@]google[.]com>
Subject: Document shared with you: “EMPLOYEE REVIEW”
Eric Estep shared a document
Eric Estep (eric.estep[@]austinisd[.]org) has invited you to edit the following document:
FWD:Amy Hackett (ATHLETIC DIRECTOR) HAS SHARED A FILE WITH YOU USING ONEDRIVE
EMPLOYEE REVIEW
Eric Estep is outside your organization.
Open