The attackers used phishing email with the subject “Documents”, the content is requesting the recipient to view an important document published on Google Docs by clicking on the included link. The link redirect users to a fake, end very convincing, Google Docs login page.