Skip to main content

Phish Report: Google Drive file share "Total_Compensation_Statement" .pdf and .docm versions

This morning many MHC employees received fake Google Drive file share messages that were very similar to yesterday's phishing attack.

Today's phishing attack details

The files in today's attack were titled: "Total_Compensation_Statement.pdf" and "Total_Compensation_Statement.docm".

Like yesterday, these also appear to be sent from an MHC employee, but the attributed sender email addresses were not MHC email addresses. 

In addition to an email notification, users may have seen these malicious files show up as a Google chat message from the Google Drive app or in their Google Drive "Shared with me" folder

Due to these recent phishing attacks, we've disabled the Google Drive app in Google Chat feature.

screenshot of malicious file share