The following email was reported as suspected phishing. It is, however, a legitimate email inadvertently sent as part of a security update to the Salesforce application (used with Workday).
Some members of the Brown community have sent inquiries about emails sent from NoReply @brown.edu about Workday transactions.
Be on the alert for tech support calls from an "Antivirus Company", which attempt to persuade victims to install products such as "Team Viewer" (a remote desktop tool) to remotely scan your computer.
Some members of the Biomedical community have sent inquiries regarding the legitimacy of the following email introducing the Henry Stewart Talks trial at Brown.
From: Hasan Koyuncu < hasan.koyuncu @csb.gov.tr >
Subject: YNT: Your Mailbox Is Almost Ful
Date: October 28, 2014 at 8:36:42 AM EDT
To: Hasan Koyuncu < hasan.koyuncu @csb.gov.tr >
From: Paypal < support @paypl.com >
Date: Wed, Oct 22, 2014 at 2:40 PM
Subject: Your Account Will Be Limited
To: help < help @brown.edu >
From: "TAYLOR, Gary (Atlanta)"< gary.taylor @exide.com >
Date: Oct 15, 2014 8:17 AM
Subject: IT HelpDesk
From: < geesres @absamail.co.za > or < boris.carvajal @electrohuila.com.co > or < pablo_c @etercor.com.ar >
Date: Thu, Oct 9, 2014 at 5:17 PM
From: Painter, Joan < JPainter @tustin.k12.ca.us >
Date: Wed, Oct 8, 2014 at 8:09 AM
Subject: RE: Your password
To: "Painter, Joan"
From: IRS.gov < xxxx @brown.edu >
Date: Tue, Oct 7, 2014 at 10:52 AM
The following is more like spam than phishing, but due to receiving multiple reports, it has been included in the Phish Bowl. Should you received this or something similar, mark it as spam to alert Google.
From: Xxxx, Xxxx < xxxx @brown.edu >
Date: Sun, Sep 28, 2014 at 11:07 AM
Subject: CONFIDENTIAL DOCUMENT
From: BROWN.EDU < xxx_xxxxxx @brown.edu >
Date: Wed, Oct 1, 2014 at 9:11 AM
Re-Validate- < Click Here>>
From: BROWN.EDU @irs.gov or IRS.gov < from various Brown addresses >
Date: Tue, Oct 7, 2014 at 10:12 AM
Subject: Tax Revenue Record
In addition to phishing emails, ISG has been hearing reports of scams coming via the telephone (sometimes called "vishing" for voice phishing).
From: "BROWN.EDU" < xxxxx @brown.edu >
Date: Sep 29, 2014 8:12 AM
Subject: I.T HELP-DESK
From: <"no-reply <no-reply"@xpayx.com>
Date: Fri, Sep 26, 2014 at 1:00 PM
Subject: PayPal - You have one new message.
To: xxxx_xxxxx @brown.edu
From: Lisa Davis < lisadaviso10 @zoho.com >
Date: Fri, Sep 26, 2014 at 9:57 AM
Subject: Who's Who in Academia (2014 Edition) - You are included
To: info @newsdigest.co
Over the past several days there have been reports of multiple senders of and variations on the "Re-Validate Your School Mail Box" phishing email.
From: IRS.gov (or BROWN.EDU @irs.gov or BROWNuni.edu @irs.gov)
Date: Thu, Sep 25, 2014 at 1:31 PM
From: "New Windows" <NewWindows @installnewindowthisfall.net>
Date: September 23, 2014 at 2:15:37 PM EDT
To: <xxxxx_xxxxxxxxx @brown.edu>
From: Xxxxx, Xxxx
Sent: Wednesday, September 24, 2014 7:09 AM
To: Xxxxx, Xxxx
Subject: Your mailbox is full.
Your mailbox is full.
Current size Maximum size
From: Mark Fletcher < fletchermd @goldmail.etsu.edu >
Date: September 22, 2014 at 4:49:30 PM EDT
From: "Ellingsen, Chris R" < Christopher.Ellingsen @aurora.org >
Date: September 22, 2014 at 2:05:40 PM EDT
To: Undisclosed recipients:;
Subject: IMPORTANT NOTICE
From: BROWN.EDU @irs.gov or BROWNuni.edu @irs.gov or IRS.gov
( Sent from a variety of @brown.edu accounts )
From: sweetpea73 @rocketmail.com
Date: Sat, Sep 20, 2014 at 8:09 AM
To: xxxxxx_xxxx @brown.edu
From: "Herndon, Kerrie A" < KHERNDON @AACPS.org >
Subject: RE: Help Desk
Date: September 19, 2014 at 12:38:40 PM EDT
To: "Herndon, Kerrie A" <KHERNDON @AACPS.org>
While this is not a typical phishing email, it is an example of a classic social engineering tactic that attempts to establish a trusted relationship with the sender who provides a means to unexpected wealth.
From: FedEx Online Services < onlineservices @fedex.com >
Date: Mon, Sep 15, 2014 at 4:02 PM
Subject: You have 1 Important Pending Shipment message
From: Webmaster < xxxxx @brown.edu >
Date: September 20, 2014 at 1:30:09 PM EDT