{"id":1540,"date":"2023-05-24T16:40:08","date_gmt":"2023-05-24T23:40:08","guid":{"rendered":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/?p=1540"},"modified":"2023-05-24T16:41:07","modified_gmt":"2023-05-24T23:41:07","slug":"you-have-2-new-shared-file","status":"publish","type":"post","link":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2023\/05\/24\/you-have-2-new-shared-file\/","title":{"rendered":"You Have 2 New Shared File"},"content":{"rendered":"<p>This phish tries to lure you in with a payroll-related document. It claims to be from UVic, but there are several signs it&#8217;s not from us:<\/p>\n<ul>\n<li>The sender address is external. Real payroll or HR emails should come from a UVic email address.<\/li>\n<li>&#8220;Uvic&#8221; uses incorrect capitalization, and there are other capitalization errors.<\/li>\n<li>The subject line has incorrect grammar.<\/li>\n<\/ul>\n<p>Hovering over the link will show that its destination is also not uvic.ca. The phisher also seems to have used individualized click tracking links for this campaign. This highlights another good reason why you shouldn&#8217;t click the link out of curiosity&#8211;the phisher may be tracking who clicked and send those people more phishing emails.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1541 size-full\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2023\/05\/2023-05-23-you-have-2-new-shared-file.png\" alt=\"Phish claiming to be a staff payroll document from &quot;Uvic Docs&quot;, with a link to click to review the supposed document.\" width=\"1082\" height=\"612\" aria-describedby=\"phish_transcript\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2023\/05\/2023-05-23-you-have-2-new-shared-file.png 1082w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2023\/05\/2023-05-23-you-have-2-new-shared-file-300x170.png 300w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2023\/05\/2023-05-23-you-have-2-new-shared-file-1024x579.png 1024w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2023\/05\/2023-05-23-you-have-2-new-shared-file-768x434.png 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/p>\n<blockquote id=\"phish_transcript\"><p>Subject: You Have 2 New Shared File<br \/>\nFrom: Uvic Shared Document &lt;file@quadrantpsc.com&gt;<\/p>\n<p>[redacted]@uvic.ca<\/p>\n<p>Please find the attached Document &#8220;Staff Payroll&#8221;.<\/p>\n<p><strong>Review Document<\/strong><\/p>\n<p>Note: This email grants access to this Document.<\/p>\n<p>Uvic Docs: Create and edit documents online.<br \/>\nYou have received this email because someone shared a document with you from Uvic Docs.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>This phish tries to lure you in with a payroll-related document. It claims to be from UVic, but there are several signs it&#8217;s not from us: The sender address is external. Real payroll or HR emails should come from a UVic email address. &#8220;Uvic&#8221; uses incorrect capitalization, and there are other capitalization errors. The subject &hellip; <a href=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2023\/05\/24\/you-have-2-new-shared-file\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">You Have 2 New Shared File<\/span><\/a><\/p>\n","protected":false},"author":8719,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1540","post","type-post","status-publish","format-image","hentry","category-uncategorized","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/1540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/users\/8719"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/comments?post=1540"}],"version-history":[{"count":3,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/1540\/revisions"}],"predecessor-version":[{"id":1544,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/1540\/revisions\/1544"}],"wp:attachment":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/media?parent=1540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/categories?post=1540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/tags?post=1540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}