This phish tries to lure you in with a payroll-related document. It claims to be from UVic, but there are several signs it’s not from us:
- The sender address is external. Real payroll or HR emails should come from a UVic email address.
- “Uvic” uses incorrect capitalization, and there are other capitalization errors.
- The subject line has incorrect grammar.
Hovering over the link will show that its destination is also not uvic.ca. The phisher also seems to have used individualized click tracking links for this campaign. This highlights another good reason why you shouldn’t click the link out of curiosity–the phisher may be tracking who clicked and send those people more phishing emails.
Subject: You Have 2 New Shared File
From: Uvic Shared Document <file@quadrantpsc.com>[redacted]@uvic.ca
Please find the attached Document “Staff Payroll”.
Review Document
Note: This email grants access to this Document.
Uvic Docs: Create and edit documents online.
You have received this email because someone shared a document with you from Uvic Docs.