[Phish] [Redacted] shared “Doc010” with you.

This phishing email was sent to a department at the University of Toronto. The message is purportedly from someone who shares a first name with a department member, but the email address does not use a University domain. The email invites the user to access a OneDrive document that appears to be from the department’s manager, but the link is malicious.

Details:

From: [Redacted] <[Redacted]@tvcc.cc>
To: [30 current department member email addresses]
Subject: [Redacted] shared “Doc010” with you.

Text:

FW: [Department manager name] as shared a file with you using one drive