I don't know if this is new, or only new to me, but this morning I got an email from somebody I know, saying they had tried to send me a pdf but weren't able to, so they wanted me to access it from Google docs.
When I clicked on the link I got a page that looked like it was a Google site, and it asked me to sign in with my email address and password and also to fill in my phone number.
Not yet fully awake, I almost did it, but then I realized this didn't seem right. I emailed the person in question and she said her account had been hacked.
If you get this kind of message, be sure to confirm with the apparent sender.