08/14/2026
🚨 Cybersecurity Alert: Beware of Fake “Document Review” Emails
Have you received an unexpected email asking you to review a document? STOP before opening the attachment.
We are seeing a scam campaign using emails that appear to contain legitimate document-review requests. The message may include a PDF, a password-protected PDF, or an HTML file.
These files can be used as part of an attack designed to:
đź”´ Steal or compromise your email account credentials
đź”´ Trick you into bypassing normal security protections
đź”´ Gain access to your computer
đź”´ Install remote-access software such as ScreenConnect
đź”´ Give attackers the ability to remotely control or further compromise the system
⚠️ What makes this scam dangerous?
The email may look legitimate and may use familiar business language such as “Document Review,” “Please Review,” “Signature Required,” or similar wording.
Do not assume an attachment is safe simply because it is a PDF or appears to come from someone you know.
🛑 If you receive a suspicious document-review email:
DO NOT:
Open unexpected attachments
Enter your email password after clicking a link or opening a document
Enter passwords provided in the email
Approve unexpected Microsoft/Google login prompts
Install software requested by an email or document
Allow someone unexpected to remotely access your computer
DO:
Verify the request with the sender using a known phone number or separate communication method
Report the email to your IT/security team
Delete the message after it has been reported
Contact IT immediately if you opened the attachment, entered credentials, or installed/approved anything
🚨 Already opened it?
Don't panic—but act quickly.
If you interacted with a suspicious document, entered your credentials, or believe remote-access software may have been installed, disconnect the affected computer from the network if your organization's procedures allow it and contact IT/security immediately.
The sooner an incident is reported, the more options your IT/security team has to protect your account, computer, and organization.
Remember: When in doubt, don't click. Verify first.
