{"id":312,"date":"2019-04-06T19:33:18","date_gmt":"2019-04-06T19:33:18","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=312"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"'Proposal-Letter-on-Google-Drive'-Phishing-Scam","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=312","title":{"rendered":"‘Proposal Letter on Google Drive’ Phishing Scam"},"content":{"rendered":"
\n

\"Email<\/a><\/p>\n

According to this email, the sender tried to attach a proposal letter but received an error message stating that the attachment exceeded the 25MP attachment size limit. So, claims the email, the sender put the document on Google Drive instead.<\/p>\n

The email includes an ‘Open’ link that supposedly allows you to access the proposal letter.<\/p>\n

At first take, the message might seem reasonable. \u00a0People often do \u00a0use Google Drive or other such services \u00a0to share large documents. And some email systems might impose an attachment size limit. So, a busy office worker who may regularly receive various types of proposal letters might be tricked \u00a0into clicking the link.<\/p>\n

But, alas, the link opens a fraudulent website designed to look like the Google Drive home page. \u00a0A popup window on the page claims that for ‘security reasons, you are required to sign in with your email address to access shared files and folders’. The window includes a form that asks you to first select \u00a0your email provider from a dropdown list and then enter your email address, telephone number and email account password.<\/p>\n

After providing this information, you will be automatically redirected to the real Google Drive website.<\/p>\n

The scammers can now collect the details you provided and use \u00a0them to hijack your email account. Once they have \u00a0gained access, they can use your account to launch further spam and scam campaigns. And, if you use a provider such as Google or Microsoft, the details you submitted \u00a0may allow the scammers to hijack not only your email account, but associated services \u00a0as well.<\/p>\n

There have \u00a0been many versions<\/a> of this scam in recent years<\/a>. If you receive one of these emails, do not click any links or open any attachments that it contains.<\/p>\n