topic Outside Domain account shared a Phishing / Malicious file to numerous staff members. in Peer-Peer Topics

Outside Domain account shared a Phishing / Malicious file to numerous staff members.

Brodie_McBeath — Mon, 03 Jul 2023 14:25:47 GMT

Hey folks!

I had a user from outside of our domain share out a PDF on Google Drive. What, if possible, would be the most effecient way to revoke this share from all user accounts that received it? We are on essentials.

Appreciate the input and digging the new forum format!

Re: Outside Domain account shared a Phishing / Malicious file to numerous staff members.

Dean_Mantz — Mon, 03 Jul 2023 23:24:54 GMT

We had a similar issue happen a few years ago and realize it is not exactly the same but may provide a starting point. I went into the Admin Console and set up a Content Compliance rule. GAC> Apps> Google Workspace> Settings for Gmail> Content Compliance. In our case, this was restricting a OneDrive PDF from being shared via email.

Re: Outside Domain account shared a Phishing / Malicious file to numerous staff members.

Kim_Nilsson — Tue, 04 Jul 2023 14:12:53 GMT

@Dean_Mantz that only affects the email notification of the shared file.

It should do absolutely nothing the actual share.

Re: Outside Domain account shared a Phishing / Malicious file to numerous staff members.

Kim_Nilsson — Tue, 04 Jul 2023 14:16:02 GMT

@Brodie_McBeath there is actually nothing you can do, unless it was shared with one of your users with Edit rights!

If, and only if, the file is shared with one of your users with Edit rights, you can change the sharing.

If not, you (the admin) can do absolutely nothing.

Each individual user can go to their Shared with me view, and "delete" the file from their view, but they too can't affect the actual sharing.

There is no API for this, so no external tool can do it.

Re: Outside Domain account shared a Phishing / Malicious file to numerous staff members.

Brodie_McBeath — Wed, 05 Jul 2023 14:20:29 GMT

Thats what I figured but was hoping I was wrong. Appreciate the response.