Phish Bowl

A collection of scam emails and other suspicious communications.
rss feed

From: FedEx Express <jiani_liu @brown.edu>
Date: March 2, 2016 at 10:57:07 AM EST
To: undisclosed-recipients:;
Subject: WAYBILL

Posted: 3/2 11:04am

From: Morrow, Rhonda <Rhonda.Morrow @dhr.alabama.gov>
Date: Wed, Mar 2, 2016 at 8:06 AM
Subject: Re: ***IT- HELPDESK { SUSPICIOUS SIGN-IN TO YOUR ACCOUNT}.‏***‏‏‏‏

Posted: 3/2 9:45am
Legitimate Email

The following email may appear phishy but is an actual notification from Benefit Strategies, Brown's benefits administrator for flexible spending accounts (see HR's 

Posted: 3/1 8:15am

From: Brown University Registrar <valentina_cano @brown.edu > OR < daniel_nurieli @brown.edu >
Date: Fri, Feb 26, 2016 at 11:07 AM
Subject: Account Activity Report .
To:

Posted: 2/26 11:22am

From: Carlisle Arias <carias @elon.edu> OR Jenna Bayer <jbayer5 @elon.edu>
Date: Wed, Feb 24, 2016 at 7:35 AM
Subject: Document from Carlisle Arias [ or Jenna Bayer ]
To:

Posted: 2/24 8:29am

Watch out for this very realistic phishing email, almost identical to the real alerts sent from AT&T, which has been noted on

Posted: 2/23 5:57pm

From: 2016 ADMIN <irs.online.services03@verizon.net>
Date: Tue, Feb 23, 2016 at 1:34 PM
Subject: TREAT URGENTLY!
To:

Posted: 2/23 3:27pm

From: Chase <no-reply @thechase.com>
Date: Fri, Feb 19, 2016 at 11:49 AM
Subject: We've sent an important communication
To:

Posted: 2/19 1:02pm

From: Christina Paxson <messsanges @gmail.com>
Date: Fri, Feb 19, 2016 at 11:50 AM
Subject: Payment
To: < actual Brown address >

Hi Christine,

Posted: 2/19 12:19pm

From: Google <Noreturn @Gmail.com> Google<Noreturn <leah_zavalick @brown.edu>
Date: Wed, Feb 17, 2016 at 7:32 PM

Posted: 2/17 10:40pm

From: no-reply <no-reply @cfargo.com>
Date: Wed, Feb 17, 2016 at 10:45 AM
Subject: Wells Fargo Online Access Temporarily Suspended
To:

[Wells Fargo Logo ]
wellsfargo.com

Posted: 2/17 10:50am

From: Liebowitz, Katherine < katherine_liebowitz @brown.edu >
Date: Tue, Feb 16, 2016 at 1:32 PM
Subject: paper
To:

Posted: 2/16 5:12pm

From: <FORMREQUEST @bcbsnational.com>
Date: Tue, Feb 16, 2016 at 2:07 PM
Subject: FW: [secure]
To:  < actual Brown address >

Posted: 2/16 2:32pm

From: Zul Ariffin B Ismail (PROD/PPMSB) < zulariffin @petronas.com.my >
Date: Mon, Feb 15, 2016 at 8:23 AM
Subject: payment confirmation
To: 

Posted: 2/15 7:18pm

Another email from same compromised account and subject but different content:

Posted: 2/15 11:01am

From: Tompkins, Julia < julia_tompkins @brown.edu >
Date: Sat, Feb 13, 2016 at 11:27 AM
Subject: I SENT YOU A FILE
To: 

You have received 1 Dropbox document in the Drive.

Posted: 2/13 1:54pm

From: "Brown.edu admin" < akelley @tiu11.org >
Date: February 8, 2016 at 5:25:44 AM EST
To: undisclosed-recipients:;
Subject: Your Brown.edu will be closed **Final warning**

Posted: 2/8 6:52am

From: Brown University < a.popescu554@upcmail.ro >
Date: Sun, Feb 7, 2016 at 11:57 AM
Subject: Pendind Messages On [ Brown address ]

Posted: 2/7 1:38pm

From: Dropbox <nada_abdallah @brown.edu>
Date: Fri, Feb 5, 2016 at 9:47 AM
Subject: IMPORTANT DOCUMENT
To:

DropBox Logo

Posted: 2/5 9:54am

From: [Last Chance] Student HealthCare Enrollment <contact @collegecampususa.com>
Date: Mon, Feb 1, 2016 at 12:15 AM
Subject: Final Day for Obamacare Enrollment for < First Name >

Posted: 2/1 10:24am
Legitimate Email

We have received questions about email sent from brown@myworkday.com with the subject "Consent to Student Employment Data Disclosure". These are legitimate notifications genera

Posted: 1/29 9:17am

​From: Help Desk <Kervijs.liep @vp.gov.lv>
Date: Wed, Jan 27, 2016 at 3:54 PM
Subject: Attention!
To:

Posted: 1/27 3:57pm

From: Brown University <kendra_cornejo @alumni.brown.edu>
Subject: Verifying your account information ..
Date: January 26, 2016 at 10:49:50 AM EST
To: undisclosed-recipients:;

Posted: 1/26 10:53am

From: John via Dropbox <ambmoody @umich.edu>
Date: Mon, Jan 25, 2016 at 12:24 PM
Subject: John shared a document with you
To: You <ambmoody @umich.edu>

Posted: 1/25 12:37pm

Brown's Graphic Service's Office Equipment reminds departments who use campus copiers or MFDs of ongoing toner scams. Their notification follows.

Posted: 1/25 10:46am

From: Hazeltine, Barrett <barrett_hazeltine @brown.edu>
Date: Mon, Jan 25, 2016 at 9:07 AM
Subject: Memo
To: Hazeltine, Barrett <barrett_hazeltine @brown.edu>

Hi,

Posted: 1/25 9:23am

From: Rineer, Alexandra (Cosan) <Alexandra.Rineer @uphs.upenn.edu>
Sent: Thursday, January 21, 2016 12:22 PM
To: Rineer, Alexandra (Cosan) <Alexandra.Rineer @uphs.upenn.edu>

Posted: 1/21 12:53pm

From: ITS Help Desk < jcowan @ pittstate.edu >
Sent: Wednesday, January 20, 2016 7:45 AM
Subject: Att:User
 
Att:User,

Posted: 1/20 11:13am

From: Brown University Mail <jonathan_ang @brown.edu>
Date: Sat, Jan 16, 2016 at 10:21 AM
Subject: Account Activity Report .
To: 

Posted: 1/16 11:51am

From: "Sparfven, Mary" <mary_sparfven @brown.edu> OR "Karewa, Linda" <linda_m_karewa @brown.edu>
Date: January 14, 2016 at 1:54:51 PM EST

Posted: 1/14 2:12pm

Pages