Unexpected shared file? Pause before you click

By Michael Canfield
IT Communication Specialist

Attackers can use file-sharing services and fake urls to send convincing messages from compromised accounts. That means even a notification sent through a legitimate service may be part of a scam or phishing attempt.

“These messages can take advantage of the trust people place in familiar collaboration tools,” said Dr. Catherine J. Ullman, Principal Technology Architect, Security.

File-sharing notifications are a routine part of working and learning at UB. That familiarity can make an unexpected invitation easy to overlook.

Ullman described examples involving Google and Box, as well as similar messages involving Microsoft services. The concern is that an attacker may control the account sharing the file and use the invitation to draw someone into an interaction that puts their information at risk.

“They use these to compromise accounts and get access to other things,” Ullman said.

The key question is whether the shared file makes sense: Were you expecting it? Do you recognize the person sharing it? Is it connected to something you’re working on? 

Before acting on an unexpected file-sharing notification:

• Confirm with the sender. Use a known phone number or a separate, trusted conversation to ask whether they shared the file.
• Consider the context. A familiar name or service is only one part of deciding whether a message is trustworthy.
• Pause at unexpected requests. Be cautious if the invitation leads to a request for login information or permission to access your account or files. 
• Ask for help. If you’re unsure about a message, contact the UBIT Help Center before continuing.

The UBIT Help Center is here to help with your technology needs at UB. Students can also reach out to the UB Tech Squad for help; they can meet you anywhere on North or South Campus.