Sophos said prospective victims will receive an email asking them to go to Google Docs to view the sender's profile.

Source