The UCLA Information Security Office is aware of UCLA staff being targeted by messages from Google Docs with the subject "Document shared with you: "HR BENEFITS.docx" requesting an urgent review of a faculty evaluation Google Doc. The email usually indicates this request is coming from a leader within the organization, but the sender address is often non-affiliated with UCLA. This is not a legitimate message from the organization, and the Google Doc should not be opened or responded to.
Below is a sample phishing email that was recently sent out. If you receive this, please report it to firstname.lastname@example.org, and do not open or respond to it. It is safe to delete the message after reporting.