Another phishing trend is via DropBox or SharePoint.
Users will receive an email from a trusted site like DropBox, SharePoint, or even Google Drive, with a link to click and, likely, a message that reads someone is trying to send them a document. The “someone,” is usually a trusted University source.
Once you click the link to advance, you may see a screen asking for your University credentials, OR a link within a document that will also lead you to a site asking for credentials or Duo Push information.
These emails can be dangerous because the email address via SharePoint, DropBox, or Google Drive is a legitimate email address.
It may also be dangerous if a name is used in the message with which you are familiar. Usually something in the subject line gives away the suspicion that the email is incredulous–like an employee payroll list.