Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

Legitimate Email

The following email was reported as suspected phishing. It is, however, a legitimate email inadvertently sent as part of a security update to the Salesforce application (used with Workday).

Posted: 11/6 12:24pm
Legitimate Email

Some members of the Brown community have sent inquiries about emails sent from NoReply about Workday transactions.

Posted: 11/5 4:49pm

Be on the alert for tech support calls from an "Antivirus Company", which attempt to persuade victims to install products such as "Team Viewer" (a remote desktop tool) to remotely scan your computer.

Posted: 11/4 2:06pm
Legitimate Email

Some members of the Biomedical community have sent inquiries regarding the legitimacy of the following email introducing the Henry Stewart Talks trial at Brown.

Posted: 10/30 12:07pm

From: Hasan Koyuncu < hasan.koyuncu >
Subject: YNT: Your Mailbox Is Almost Ful
Date: October 28, 2014 at 8:36:42 AM EDT
To: Hasan Koyuncu < hasan.koyuncu >

Posted: 10/28 11:33am

From: Paypal < support >
Date: Wed, Oct 22, 2014 at 2:40 PM
Subject: Your Account Will Be Limited
To: help < help >

Dear customer,

Posted: 10/24 2:08pm

From: "TAYLOR, Gary (Atlanta)"< gary.taylor >
Date: Oct 15, 2014 8:17 AM
Subject: IT HelpDesk

Posted: 10/15 8:10pm

From: < geesres > or < boris.carvajal > or < pablo_c >
Date: Thu, Oct 9, 2014 at 5:17 PM

Posted: 10/9 11:41am

From: Painter, Joan < JPainter >
Date: Wed, Oct 8, 2014 at 8:09 AM
Subject: RE: Your password
To: "Painter, Joan"

Dear User‏‏

Posted: 10/8 8:46am

From: < xxxx >
Date: Tue, Oct 7, 2014 at 10:52 AM

Posted: 10/7 11:02am

The following is more like spam than phishing, but due to receiving multiple reports, it has been included in the Phish Bowl. Should you received this or something similar, mark it as spam to alert Google.

Posted: 10/2 3:41pm

​From: Xxxx, Xxxx < ​xxxx >
Date: Sun, Sep 28, 2014 at 11:07 AM

Posted: 10/1 11:41am

From: BROWN.EDU < xxx_xxxxxx >
Date: Wed, Oct 1, 2014 at 9:11 AM

Re-Validate- < Click Here>>

Posted: 10/1 9:24am

From: BROWN.EDU or  < from various Brown addresses >
Date: Tue, Oct 7, 2014 at 10:12 AM
Subject: Tax Revenue Record

Posted: 9/30 10:36am

In addition to phishing emails, ISG has been hearing reports of scams coming via the telephone (sometimes called "vishing" for voice phishing).

Posted: 9/29 1:42pm
Updated: 3/13/15 10:50am

From: "BROWN.EDU"  < xxxxx > 
Date: Sep 29, 2014 8:12 AM
Subject: I.T HELP-DESK

Posted: 9/29 8:27am

From: <"no-reply <no-reply">
Date: Fri, Sep 26, 2014 at 1:00 PM
Subject: PayPal - You have one new message.
To: xxxx_xxxxx

Posted: 9/26 1:47pm

From: Lisa Davis < lisadaviso10 >
Date: Fri, Sep 26, 2014 at 9:57 AM
Subject: Who's Who in Academia (2014 Edition) - You are included
To: info

Good morning.

Posted: 9/26 12:16pm

Over the past several days there have been reports of multiple senders of and variations on the "Re-Validate Your School Mail Box" phishing email.

Posted: 9/26 11:14am

From: (or BROWN.EDU or
Date: Thu, Sep 25, 2014 at 1:31 PM
Subject: E-file

Posted: 9/25 1:44pm

From: "New Windows" <NewWindows>
Date: September 23, 2014 at 2:15:37 PM EDT
To: <xxxxx_xxxxxxxxx>

Posted: 9/24 9:38am

From: Xxxxx, Xxxx
Sent: Wednesday, September 24, 2014 7:09 AM
To: Xxxxx, Xxxx
Subject: Your mailbox is full.

Your mailbox is full.

465MB 500MB
Current size Maximum size

Posted: 9/24 8:35am

From: Mark Fletcher < fletchermd >
Date: September 22, 2014 at 4:49:30 PM EDT
To: undisclosed-recipients:;
Subject: Update

Posted: 9/22 4:55pm

From: "Ellingsen, Chris R" < Christopher.Ellingsen >
Date: September 22, 2014 at 2:05:40 PM EDT
To: Undisclosed recipients:;

Posted: 9/22 2:30pm

From: BROWN.EDU or or
( Sent from a variety of accounts )

Posted: 9/22 2:28pm

From: sweetpea73
Date: Sat, Sep 20, 2014 at 8:09 AM
Subject: RE:
To: xxxxxx_xxxx

Posted: 9/22 8:23am

From: "Herndon, Kerrie A" < KHERNDON >
Subject: RE: Help Desk
Date: September 19, 2014 at 12:38:40 PM EDT
To: "Herndon, Kerrie A" <KHERNDON>

Posted: 9/19 1:00pm

While this is not a typical phishing email, it is an example of a classic social engineering tactic that attempts to establish a trusted relationship with the sender who provides a means to unexpected wealth.

Posted: 9/16 9:41am

From: FedEx Online Services < onlineservices >
Date: Mon, Sep 15, 2014 at 4:02 PM
Subject: You have 1 Important Pending Shipment message


Posted: 9/15 4:31pm

From: Webmaster < xxxxx >
Date: September 20, 2014 at 1:30:09 PM EDT
To: undisclosed-recipients:;

Posted: 9/13 12:03pm