The success of email spam filters has left scammers looking for new ways to get people to click on malicious links. And Google Drive is pretty accommodating. By default, Drive wants you to know when someone has mentioned you on a document. In a work setting, this could be a colleague asking you to check over a slide in a presentation or a brief for a new project. For scammers, it’s a clever way of putting a malicious link right in front of a potential victim.Some users indicated to WIRED that they had received several versions of the attack. Acknowledging this scam technique, a Google spokesperson told WIRED that Google was in the process of working on new security measures that would make it more difficult for Google Drive spam to avoid its systems. This scam wave highlights the need for users to be on the lookout for email-borne attacks. Organizations can help their users in this regard by educating them about some of the most common types of phishing attacks that are in circulation today.