I titled this post using the same words from this blog post because it very plainly gets to the point of the issue.  No need for me to complicate it by being creative.

Phishing is a term used to describe hacking attempts to get your personal information by pretending to be someone that you trust contacting you via an electronic communication, such as email.

PropertyBoss has recently received emails that have been identified as the phishing scam that targets Google Docs and Google Drive users.  As a result, it’s possible that you could receive emails from someone at PropertyBoss that contains a link to this phishing scam.  The email usually contains a Subject line that references a document.  The one we saw was even clever enough to mention property management!

phish_subject

 

The body of the email contains a link to download the “document” and will take you to a fake page that looks like the Google login page.

phish_site_image

If you log in to this fake page, it will send your credentials to a script that captures your information.  After that, the hackers can have their fun at your expense.

A few things we noticed as indications this was not a “normal” email:

  • The Subject line and the “document” name were all very generic.  It didn’t reference anything in particular.
  • There were no email addresses in the To: field and the recipient was blind copied.
    phish_BCC

 

  • If you hovered your cursor over the link, you would see the destination was not Google Docs and definitely looked suspicious.

phish_link

 

 

If you receive any suspicious emails from us (or anyone!) and have taken the bait to enter your credentials, you should change your passwords immediately and contact the person responsible for your email and your network administrator.

Be safe out there!