Original Phishing Message

Tips for Detection

• Though the message was sent using Google Drive document sharing, use caution if you do not recognize the sender or the sender is outside your organization.
• Notice the mismatch between the sender (e.g. Adam Hille) versus the name mentioned in the sharing note (e.g. President ISIAAH CRAWFORD) versus the title of the document (e.g. IT SUPPORT/HELP-DESK). This should be suspicious.

Where Did the Link Lead?

The link led to a PDF stored on Google Drive containing another link to a Google Form that asked for your password. Never enter your credentials or sensitive personal information on online forms.

Text of Phishing Message

Subject: Item shared with you: “IT SUPPORT/HELP-DESK.pdf”

Adam Hille shared an item

Adam Hille (ahille[@]isd2835[.]org) has shared the following item:
fwd: President ISIAAH CRAWFORD shared a File with you using One Drive.

IT SUPPORT/HELP-DESK.pdf