Phishing Scam Summary
A file sharing scam leads recipients to a fake OneDrive Sign In screen, which was created by a Google Apps Script user. The email displays fake email addresses to make it appear legitimate.
How to Protect Yourself
Be suspicious of any unexpected document share. If you receive a shared document email you are not expecting, check with the sender by another means, do not reply to the email. Never open an unexpected shared document.
Be additionally suspicious of the warning that appears at the top of the screen that indicates "This application was created by a Google Apps Script user." In general, it doesn't make sense when a link to a “document” doesn’t open actual content. You should beware if it instead goes to a website to sign in to view, or worse, to download and install software.
See Shared Document Emails Can Be Traps for more information of this and similar types of scams.
If You Responded to This or Similar Scams
If you responded to this or similar scams using your U-M credentials, change your U-M password immediately and contact the ITS Service Center for assistance.
Phishing message text:
From: Domenico Grasso < [redacted]@umich.edu>
Date: Tue,15 Sep 2026
Subject: Updated 2026/2027 Staff and Faculty Event Calendar
To: University Of Michigan <[redacted]@umich.edu>
Dear Staff and Faculty,
The 2026/2027 Staff & Faculty Event Calendar has now been finalized, updated and is available for review.The calendar brings together important dates and scheduled activities for the year, including:
- Staff and faculty events
- Department meetings and activities
- School-level meetings
- District-wide meetings and events
- Other scheduled staff commitments
Please take a moment to review the complete calendar so you can note the dates that apply to you and your department and plan accordingly.
Review the 2026 Staff & Faculty Event Calendar:
[Click here to view the complete calendar]
We encourage all staff members to review the calendar at their earliest convenience and keep it available for reference throughout the year.
Thank you for your continued commitment and support.
Titles: President
Locations: District Office
Email: [email protected]
