Spoof and fake downloads messaging

Original email suggests a colleague has downloaded your filesoriginal

If you select to download them you are redirected to the fake WeTransfer page. It’s been customized for unique recipients:If you choose to select Download All, you will be prompted to login to do so:enter credentials

At which point, they will capture you username and password.