Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

Phishing Email (on campus)

From: "IRS.gov" <nathan_buchwald @brown.edu>
Subject: 2016/2017 TAX RETURNS
Date: November 28, 2016 at 11:24:39 AM EST
To: undisclosed-recipients:;
Reply-To: no_reply @info.org

Posted: 11/28 11:27am
Updated: 11/28 12:10pm
Phishing Email (on campus)

From: Dr. Stephon Alexander <stephon_alexander @brown.edu>
Date: Fri, Nov 25, 2016 at 1:18 PM
Subject: RE: Urgent Request
To: [ Brown email address ]

Hello [ Names ],

Posted: 11/28 11:15am
Phishing Email (on campus)

From: Webmaster@brown.edu [ from aa993 @njit.edu, scarlett_bergam @brown.edu, and rebecca_berube @brown.edu ]
Date: Sun, Nov 27, 2016 at 18:24

Posted: 11/27 8:13pm
Phishing Email (on campus)

From: Ferreira, Paula <paula_ferreira @brown.edu>
Date: Wed, Nov 23, 2016 at 12:41 PM
Subject: ESSENTIAL DOCX - KINDLY GO THROUGH : 11/23/16 brown[pdf]
To:

Posted: 11/23 2:42pm
Phishing Email (on campus)

From: Alexis Atwell <alexis_atwell @brown.edu>
Date: Fri, Nov 18, 2016 at 6:57 PM
​​Subject: 
To: 

Posted: 11/18 7:14pm
Phishing Email (on campus)

Beware of printer scams that typically begin with someone identifying themselves as being an individual on campus requesting printer model numbers or offering toner for printers or copiers.

Posted: 11/17 11:24am
Phishing Email (on campus)

We've had a report of a phishing scheme that arrives via both email and the telephone, requesting that you complete a timesheet for the company Aerotek.

Posted: 11/15 3:37pm
Phishing Email (on campus)

From: Amazon, Inc. Shipping <support1427 @amazonwisconsin.org>
Date: Tue, Nov 8, 2016 at 8:45 AM
Subject: Re: Amazon Inc. Order Details for Xxxx Xxxxx, [Department/Program] - Brown University

Posted: 11/8 11:57am
Phishing Email (on campus)

From: Mail Administrators. <rkward @telus.net>
Date: Tue, Nov 8, 2016 at 9:35 AM
Subject: Email Validation!
To: 

Hello

Posted: 11/8 11:17am
Phishing Email (on campus)

From: Bates, Kaye M <bates_k @aps.edu>
Date: Sat, Nov 5, 2016 at 2:09 PM
Subject: payment slip
To:

Posted: 11/7 8:51am
Phishing Email (on campus)

From: Employment <dkyllo @comcast.net> [ sent from different Comcast addresses ]
Date: Mon, Oct 31, 2016 at 12:04 PM
Subject: Part-time Assistant Needed !
To: [ various Brown addresses ]

Posted: 10/31 3:59pm
Phishing Email (on campus)

From: InformationTechnologyUpdate @edu <blennon785 @hcc.edu>
Date: Fri, Oct 28, 2016 at 3:17 AM
Subject: IT help-desk - VALIDATE
To:

Posted: 10/28 9:39am
Phishing Email (on campus)

​From: Jin Ping Chi <drazizehab @gmail.com>
Date: Sun, Oct 16, 2016 at 9:26 PM
Subject: NOT SPAM: Our Reserved Clients needs good Business Relationship. See PDF
To:

Posted: 10/17 9:37am
Phishing Email (on campus)

From: Brown Unversity Info;Barbara D <harrispowell23 @gmail.com>
Date: Fri, Oct 14, 2016 at 1:39 PM
Subject: Important Info;salary increase/Staff
To:

Dear Staff,

Posted: 10/14 3:33pm
Phishing Email (on campus)

Steer clear of pop-up surveys, like the "Brown University Survey" pictured below, which may appear after visiting various sites.

Posted: 10/14 12:08pm
Updated: 8/24/17 2:05pm
Phishing Email (on campus)

Faculty members who are treasurers for professional societies are being targeted with a variation on the wire transfer scam that periodically surfaces at Brown.

Posted: 9/29 1:54pm
Phishing Email (on campus)

Be on alert for a suspicious FedEx mailing, which is phishing and has an attached zipfile containing ransonware.

Posted: 9/27 12:29pm
Phishing Email (on campus)

From: Emily Coker <emily.coker25 @uga.edu>
Date: Mon, Sep 26, 2016 at 1:48 PM
Subject: VERIFY
To:  [ lengthy list of @brown.edu addresses ]

Posted: 9/26 2:01pm
Phishing Email (on campus)

Another "wire transfer hoax" email has been reported, similar to others reported every couple of months (cyber criminals "spoof" well-know email addresses to try and trick recipients).  Like those emails (see

Posted: 9/23 11:43am
Phishing Email (on campus)

From: protons atomik <platfromacreative @gmail.com>
Date: Fri, Sep 23, 2016 at 5:51 AM
Subject: Master of Engineering
To: [ Brown addresses ]

Good day

Dear [ Name ]

Posted: 9/23 9:56am
Phishing Email (on campus)

A detailed but suspicious email was reported that appears to come from Apple, warning that your Apple ID was used to sign into iCloud, but is actually a phishing attempt.

Posted: 9/22 10:21am
Phishing Email (on campus)

From: "Mail Service" <olesya.saveleva @nyfa.edu>
Date: Sep 21, 2016 6:36 PM
Subject: HACKER WARNING:
To:
Cc:

[  No text, just attachment "Brown.EDU.pdf" ]

Posted: 9/22 8:24am
Phishing Email (on campus)

From: Collantes, Anthony <ac674 @njit.edu>
Date: Saturday, September 17, 2016
Subject: Message from Information Security: Your email account has been compromised
To: 

Posted: 9/17 2:25pm
Phishing Email (on campus)

From: hr_Dept @brown.edu <kkcarson @peoplepc.com>
Date: Mon, Sep 12, 2016 at 11:28 AM
Subject: Account Update
To:

Posted: 9/12 11:33am
Phishing Email (on campus)

From: Fatani, Jameel <fatanij @student.swosu.edu>
Date: Mon, Sep 5, 2016 at 6:05 PM
Subject: UPDATE YOUR MAIL BOX
To: 

Posted: 9/6 9:54am
Phishing Email (on campus)

From: "Tang, Jay" <jay_tang @brown.edu>
Date: September 5, 2016 at 12:53:48 PM EDT
To: undisclosed-recipients:;
Subject: very important

Posted: 9/5 3:12pm
Phishing Email (on campus)

From: Hulikal Sampath Kumaran, Srivatsan <srivatsan_hulikal @brown.edu>
Date: Thu, Sep 1, 2016 at 12:03 PM
Subject: proof of payment
To: 

Posted: 9/1 12:38pm
Legitimate Email

The Center for Learning & Professional Development inadvertently sent an email to a larger group than intended; if you received it and didn't previously attend an informational session, please disregard it.

Posted: 8/30 4:00pm
Phishing Email (on campus)

A classic phishing scam returns, signalling that the start of a new academic year can't be far away.

Posted: 8/30 3:00pm
Phishing Email (on campus)

From time to time we receive questions about the authenticity of email solicitations from Academia.edu, such as the following request to approve a co-author tag.

Posted: 8/30 2:30pm

Pages