Phish Bowl

A collection of scam emails and other suspicious communications.

Phishing Email (on campus)

​From: eFax <noreply.DHtiB @efax-reports.com>
Date: Mon, Feb 20, 2017 at 11:15 AM
Subject: eFax Report
To: [ Brown address ]

Posted: 2/20 11:24am
Legitimate Email

From: "Chougule, Geeta" <geeta_chougule @brown.edu>
Date: February 16, 2017 at 1:41:26 PM EST
To: "Chougule, Geeta Jain" <geeta_chougule @brown.edu>

Posted: 2/16 3:53pm
Phishing Email (on campus)

From: "Brady, Daniela" <dm2069 @cumc.columbia.edu>
Subject: IT Notification
Date: February 16, 2017 at 11:54:26 AM EST
To: "Brady, Daniela" <dm2069 @cumc.columbia.edu>

Posted: 2/16 1:42pm
Legitimate Email

This is legitimate email from Captain Bishop, Brown's contact with the Marine Corps PLC.

Posted: 2/16 9:54am
Phishing Email (on campus)

Under the category, "too good to be true", the Information Security Group and Federal Trade Commission warn you to look out for "Mystery Shopper Scams": opportunities to evaluate the quality of service in stores, such

Posted: 2/13 9:13am
Phishing Email (on campus)

From: Robert Wolford <robert561828 @outlook.com>
Date: Wed, Feb 8, 2017 at 8:15 AM
Subject: IMMEDIATE ACTION REQUIRED
To: < Brown address >

Hi <first name>,

Posted: 2/8 8:43am
Phishing Email (on campus)

From: Tim Cindric <tcindric @acosta.com>
Date: Mon, Feb 6, 2017 at 9:41 AM
Subject: IT Security-Change your password.
To: "help @websecurity.edu" help @websecurity.edu

Posted: 2/6 9:59am
Phishing Email (on campus)

From: USAA USAA.Web.Services @customermail.usaa.com <guestservices @xtremeactionpark.com>
Sent: Thursday, February 2, 2017 2:49 PM
Subject: USAA Detected Suspicious Activity

Posted: 2/2 3:49pm
Phishing Email (on campus)

The following spoofed email -- targeting some at Brown with a request "to complete a task for me urgently" -- tries to trick the receiver into thinking it is from President Paxson.

Posted: 1/23 11:33am
Phishing Email (in the wild)

The FBI has issued the following alert about college students being targeted in an employment scam that includes advertising phony job opportunities on college employment websites or sending emails to school accounts

Posted: 1/20 9:30am
Legitimate Email

We've received several reports of a suspicious email sent from ClaimSupport@benstrat.lh1od.com (an example follows below) that Benefit Strategies told us is legitim

Posted: 1/12 12:01pm
Phishing Email (on campus)

From: "IRS.gov  <taxassistance @info.gov>" <aboler20 @cornellcollege.edu>
Date: January 7, 2017 at 5:22:29 AM EST
To: undisclosed-recipients:;

Posted: 1/7 3:17pm
Phishing Email (on campus)

From: Message from IRS.gov <do_no_reply @revnue.gov> <xhesika_begaj @brown.edu>
Date: Fri, Jan 6, 2017 at 6:00 AM
Subject: 2017 Tax Filing Season
To:

Posted: 1/6 7:47am
Phishing Email (on campus)

From: Diana Richardson <diana_richardson@brown.edu> <hobrien6@student.fitchburgstate.edu>

Posted: 1/4 11:47am
Phishing Email (on campus)

From: Brown Servicedesk <leah_olson @brown.edu>
Date: Mon, Dec 19, 2016 at 11:44 AM
Subject: Important Notice
To:

Posted: 12/19 12:51pm
Legitimate Email

From: University Health Plans <sgrabowski @univhealthplans.com>
Date: Fri, Dec 16, 2016 at 1:23 PM
Subject: Brown University Insurance Waiver Audit
To:  [ Brown address ]

Posted: 12/16 1:59pm
Phishing Email (on campus)

Beware this classic scam (and example of "social engineering"): a sender contacts you with a request for assistance, usually money, when stranded in a foreign country due to a robbery. 

Posted: 12/14 10:58am
Phishing Email (on campus)

From: USA Computer Store <order @usacomputerstore.com>
Date: Wed, Dec 14, 2016 at 10:22 AM
Subject: invoice #00168
To: [ Brown address ]

Please pay this already:

Posted: 12/14 10:34am
Phishing Email (on campus)

From: Nykia Leach <leach_nykia @wheatoncollege.edu>
To: <ithelp @brown.edu>
Subject: Invitation to Access [DOCX.11] 12.14.2016
Date: Wed, 14th Dec 2016 9:12am

Posted: 12/14 9:37am
Phishing Email (on campus)

From: Help-Desk <wakasoninvestment221 @gmail.com>
Date: Tue, Dec 13, 2016 at 2:34 PM
Subject: ITS Service Desk
To: 

Posted: 12/13 3:33pm
Phishing Email (on campus)

Phishing can arrive by phone as well as email. A current phone scam to be aware of is one supposedly from an agency claiming to be the IRS and calling about a law suit against the intended victim.

Posted: 12/7 11:33am
Phishing Email (on campus)

From: emma emma <worldwarpeople @gmail.com>
Date: Fri, Dec 2, 2016 at 11:29 AM
Subject: SCHOLARSHIP STUDENT
To:

Posted: 12/2 11:43am
Phishing Email (on campus)

From: Robert Samuels <rsamuels @uri.edu>
Date: Wed, Nov 30, 2016 at 12:45 PM
Subject: Re: Document
To:

Please see attached document for your review.

Posted: 11/30 2:15pm
Phishing Email (on campus)

From: Renata Luongo <rluongo @rihs.org>
Date: Tue, Nov 29, 2016 at 9:44 AM
Subject: ACTION REQUIRED : Invitation to view shared document 11/29/30 #16728762
To:

Good Morning,

Posted: 11/29 10:40am
Phishing Email (on campus)

Subject:  Notice From Web
Date: Mon, 28 Nov 2016 21:58:58
From:  Lynne Teplin <LYNNET @lagcc.cuny.edu>
Reply-To:  alfordjohn0333 @gmail.com

Posted: 11/28 6:54pm
Phishing Email (on campus)

From: IRS.gov <theodore_bogosian @brown.edu>
Date: Mon, Nov 28, 2016 at 1:33 PM
Subject: IDENTITY AUTHENTICATION.
To:

Posted: 11/28 1:35pm
Phishing Email (on campus)

From: "IRS.gov" <nathan_buchwald @brown.edu>
Subject: 2016/2017 TAX RETURNS
Date: November 28, 2016 at 11:24:39 AM EST
To: undisclosed-recipients:;
Reply-To: no_reply @info.org

Posted: 11/28 11:27am
Updated: 11/28 12:10pm
Phishing Email (on campus)

From: Dr. Stephon Alexander <stephon_alexander @brown.edu>
Date: Fri, Nov 25, 2016 at 1:18 PM
Subject: RE: Urgent Request
To: [ Brown email address ]

Hello [ Names ],

Posted: 11/28 11:15am
Phishing Email (on campus)

From: Webmaster@brown.edu [ from aa993 @njit.edu, scarlett_bergam @brown.edu, and rebecca_berube @brown.edu ]
Date: Sun, Nov 27, 2016 at 18:24

Posted: 11/27 8:13pm
Phishing Email (on campus)

From: Ferreira, Paula <paula_ferreira @brown.edu>
Date: Wed, Nov 23, 2016 at 12:41 PM
Subject: ESSENTIAL DOCX - KINDLY GO THROUGH : 11/23/16 brown[pdf]
To:

Posted: 11/23 2:42pm

Pages