This phishing email was sent to a department at the University of Toronto. The message is purportedly from someone who shares a first name with a department member, but the email address does not use a University domain. The email invites the user to access a OneDrive document that appears to be from the department’s manager, but the link is malicious.
From: [Redacted] <[Redacted]@tvcc.cc>
To: [30 current department member email addresses]
Subject: [Redacted] shared “Doc010” with you.
FW: [Department manager name] as shared a file with you using one drive