Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

From: Galindo, Abraham <abraham_galindo @brown.edu>
Date: Thu, Mar 10, 2016 at 8:57 AM
Subject: Note
To: 

Posted: 03/10/2016 - 6:26pm

Though loaded with tell-tale signs and unlikely to fool, this email was added because of a new tactic: that due to a phishing scam, you'll need to "re-validate your mailbox into full operational system."

Posted: 03/09/2016 - 11:02am

Two personalized emails from myawesomeresources.com with too-good-to-be true offerings.

Posted: 03/08/2016 - 9:57am
Updated: 3/10 11:05am

From: Estelle Rollins <RollinsEstelle604 @public-gprs377640.centertel.pl>
Date: Tue, Mar 8, 2016 at 5:52 AM
Subject: Compensation - Reference Number #355850

Posted: 03/08/2016 - 9:31am

From: Admin Server <ahusband @communityprep.org>
Date: Tue, Mar 8, 2016 at 6:47 AM
Subject: Email Validation
To:

Posted: 03/08/2016 - 8:29am

Stay alert for phony wire transfer requests which surface at Brown periodically.  Known as a "Business Email Compromise", the "scammers impersonate a supplier, a high-level executive with the firm, or a firm’s employe

Posted: 03/07/2016 - 3:23pm

From: Cox, Victor <victor_cox @brown.edu>
Date: Mon, Mar 7, 2016 at 10:53 AM
Subject: Reminder
To:

Hi,

Posted: 03/07/2016 - 11:13am

From: Pliakas, John < john_pliakas @brown.edu>
Date: Mon, Mar 7, 2016 at 10:35 AM
Subject: Review Attached
To:

Review the sent document via GoogleDrive . Size of (248 KB Total)

Posted: 03/07/2016 - 11:06am

An example of a classic "Nigerian Scam" was recently reported. Aside from its entertainment value, this message contains several tell-tale signs of a phishing email. How many can you spot?

Posted: 03/03/2016 - 9:56am

From: FedEx Express <jiani_liu @brown.edu>
Date: March 2, 2016 at 10:57:07 AM EST
To: undisclosed-recipients:;
Subject: WAYBILL

Posted: 03/02/2016 - 11:04am

From: Morrow, Rhonda <Rhonda.Morrow @dhr.alabama.gov>
Date: Wed, Mar 2, 2016 at 8:06 AM
Subject: Re: ***IT- HELPDESK { SUSPICIOUS SIGN-IN TO YOUR ACCOUNT}.‏***‏‏‏‏

Posted: 03/02/2016 - 9:45am
Legitimate Email

The following email may appear phishy but is an actual notification from Benefit Strategies, Brown's benefits administrator for flexible spending accounts (see HR's 

Posted: 03/01/2016 - 8:15am

From: Brown University Registrar <valentina_cano @brown.edu > OR < daniel_nurieli @brown.edu >
Date: Fri, Feb 26, 2016 at 11:07 AM
Subject: Account Activity Report .
To:

Posted: 02/26/2016 - 11:22am

From: Carlisle Arias <carias @elon.edu> OR Jenna Bayer <jbayer5 @elon.edu>
Date: Wed, Feb 24, 2016 at 7:35 AM
Subject: Document from Carlisle Arias [ or Jenna Bayer ]
To:

Posted: 02/24/2016 - 8:29am

Watch out for this very realistic phishing email, almost identical to the real alerts sent from AT&T, which has been noted on

Posted: 02/23/2016 - 5:57pm

From: 2016 ADMIN <irs.online.services03@verizon.net>
Date: Tue, Feb 23, 2016 at 1:34 PM
Subject: TREAT URGENTLY!
To:

Posted: 02/23/2016 - 3:27pm

From: Chase <no-reply @thechase.com>
Date: Fri, Feb 19, 2016 at 11:49 AM
Subject: We've sent an important communication
To:

Posted: 02/19/2016 - 1:02pm

From: Christina Paxson <messsanges @gmail.com>
Date: Fri, Feb 19, 2016 at 11:50 AM
Subject: Payment
To: < actual Brown address >

Hi Christine,

Posted: 02/19/2016 - 12:19pm

From: Google <Noreturn @Gmail.com> Google<Noreturn <leah_zavalick @brown.edu>
Date: Wed, Feb 17, 2016 at 7:32 PM

Posted: 02/17/2016 - 10:40pm

From: no-reply <no-reply @cfargo.com>
Date: Wed, Feb 17, 2016 at 10:45 AM
Subject: Wells Fargo Online Access Temporarily Suspended
To:

[Wells Fargo Logo ]
wellsfargo.com

Posted: 02/17/2016 - 10:50am

From: Liebowitz, Katherine < katherine_liebowitz @brown.edu >
Date: Tue, Feb 16, 2016 at 1:32 PM
Subject: paper
To:

Posted: 02/16/2016 - 5:12pm

From: <FORMREQUEST @bcbsnational.com>
Date: Tue, Feb 16, 2016 at 2:07 PM
Subject: FW: [secure]
To:  < actual Brown address >

Posted: 02/16/2016 - 2:32pm

From: Zul Ariffin B Ismail (PROD/PPMSB) < zulariffin @petronas.com.my >
Date: Mon, Feb 15, 2016 at 8:23 AM
Subject: payment confirmation
To: 

Posted: 02/15/2016 - 7:18pm

Another email from same compromised account and subject but different content:

Posted: 02/15/2016 - 11:01am

From: Tompkins, Julia < julia_tompkins @brown.edu >
Date: Sat, Feb 13, 2016 at 11:27 AM
Subject: I SENT YOU A FILE
To: 

You have received 1 Dropbox document in the Drive.

Posted: 02/13/2016 - 1:54pm

From: "Brown.edu admin" < akelley @tiu11.org >
Date: February 8, 2016 at 5:25:44 AM EST
To: undisclosed-recipients:;
Subject: Your Brown.edu will be closed **Final warning**

Posted: 02/08/2016 - 6:52am

From: Brown University < a.popescu554@upcmail.ro >
Date: Sun, Feb 7, 2016 at 11:57 AM
Subject: Pendind Messages On [ Brown address ]

Posted: 02/07/2016 - 1:38pm

From: Dropbox <nada_abdallah @brown.edu>
Date: Fri, Feb 5, 2016 at 9:47 AM
Subject: IMPORTANT DOCUMENT
To:

DropBox Logo

Posted: 02/05/2016 - 9:54am

From: [Last Chance] Student HealthCare Enrollment <contact @collegecampususa.com>
Date: Mon, Feb 1, 2016 at 12:15 AM
Subject: Final Day for Obamacare Enrollment for < First Name >

Posted: 02/01/2016 - 10:24am
Legitimate Email

We have received questions about email sent from brown@myworkday.com with the subject "Consent to Student Employment Data Disclosure". These are legitimate notifications genera

Posted: 01/29/2016 - 9:17am

Pages