I received an email similar to this last week from someone who would have sent me a request for an RFP. It looked phishy, so I forwarded it to them and received a quick response confirming it was legitimate and asking me to review it. I clicked, and it went to a weird page asking me to confirm I was human. Normally, I would have closed the window, but she had said it was legit. It routed to a Google Drive doc telling me to request access. I did. Then I emailed her, got a vacation auto-responder, and forgot about it.
Today, everyone received the same email from me. I also saw one auto-response that said the same thing I'd gotten last week. So the scam either has an auto-response or a bot replying to confirm legitimacy.
Since I was alerted quickly, I signed out of all accounts and think I mitigated the damage. I was on the phone with Google support and they couldn't find anything.
I'm on a Mac, I've run a system check, and I've alerted everyone. Is there anything else I should do? I know this scam has been going on for a couple months but wanted to see if anyone else had experience with it. I'm wondering what the end game was too.