Original Phishing Message

From: no-reply[@]sharepointonline[.]com
Display name: Christopher Torres
Subject: Christopher Torres shared “Memo_” with you.

Tips for Detection

  • Though the email was sent from a legitimate Microsoft service (SharePoint), the email was sent from somebody outside the organization
  • Be wary of document shares that you are not expecting. Online collaboration tools are a frequent method of phishing attacks.
  • Many document share phishing emails contain enticing subject lines like “Memo”, “Dept Evaluation”, “Dept Assessment”, or “Annual Faculty Evaluations”.
  • Though the links led to legitimate sites such as Microsoft SharePoint , the content displayed should be suspicious. Remember to NEVER enter passwords on online forms.

Text of Phishing Message

From: no-reply[@]sharepointonline[.]com
Display name: Christopher Torres
Subject: Christopher Torres shared “Memo_” with you.

Christopher Torres shared a file with you

You have amessage from the admin

Memo_

This link will work for anyone.