Fake document shares used to create urgency around a login | Dead Internet Theory
Dead Internet Theory: Fake document-share attacks exploit a normal workplace habit: opening a file someone says they shared. Microsoft has documented phishing campaigns that abuse OneDrive, SharePoint, Dropbox, and related notification flows to push users toward credential theft.