Phish Bowl
A collection of scam emails and other suspicious communications.
From: William Thirsk <office_of_biomed_communications@messages.brown.edu>
Date: Friday, April 9, 2021 3:39 PM
If you've received a mysterious calendar invite from an address like unknownorganizer@calendar.google.com for an event that has you scratching your head, you m
From: Jeff Crane <info@cranejeff.com>
Date: Sat, Apr 10, 2021 at 11:29 AM
Subject: RE: Your CASH APP Deposit
From: ON-CAMPUS JOBS <gabrieljelex7@gmail.com>
Date: Sat, Apr 10, 2021 at 7:52 AM
Subject: Hiring for Research Assistants
To:
From: CAMPUS JOBS <lm2512550@gmail.com>
Date: Thu, Apr 8, 2021 at 10:26 PM
Subject: Administrative Assistant Needed - Part Time
To:
From: David Kennan <dataexsdg@deskusing.com>
Date: Thu, Apr 8, 2021 at 2:27 PM
Subject: Form W-2 Record
From: Chris Ingram <info@ingramchris.com>
Date: Mon, Apr 5, 2021 at 11:06 AM
Subject: RE: Your Unclaimed Assets -Action Needed
From: Gary Wilson <oliverdaczdgy@gmail.com>
Date: Wed, Apr 7, 2021 at 10:42 AM
Subject: Confirmed Order
From: Sandra Fields <sandrafields303@gmail.com> [ or Scott Rousell <scottrousell344@gmail.com> ]
An impostor email from "Team Healthy" is masquerading as message from Verily.com, warning that the recipient has tested positive and needs to immediately shelter in place.
The Internal Revenue Service has warned of an ongoing IRS-impersonation scam that appears to primarily target educational institutions, including students and staff who have ".edu" email addresses.
From: Sarah Burry <info@burrysarah.com>
Date: Thu, Mar 25, 2021 at 1:45 PM
Subject: RE: Your Amazon Interview
If you receive a security alert from Microsoft and are concerned about its source, you'll know it's legitimate if it's from the Microsoft account team and sent from the address
From: Dana Eden <sloanemilly@gmail.com>
Date: Tue, Mar 23, 2021 at 1:38 PM
Subject:
Some members of the Brown community reported receiving the following notice from the Waltham-based marketing company, Aberdeen, referencing the California Consumer Protection Act (CCPA).
From: Terri Jackson <info@jacksonterri.com>
Date: Mon, Mar 22, 2021 at 11:04 AM
Subject: Notice: Federal Grant Approval
From: Job Opportunity <susandowningcares@gmail.com> or Campus Jobs <solarubi61@gmail.com>
From: Prof. Chung Cha <ihiabe22@gmail.com>
Date: Mon, Mar 15, 2021 at 8:20 PM
Subject: JOB OPENING FOR RESEARCH ASSISTANT
To:
From: <CareEvolve@lknotification.com>
Date: Thu, Mar 11, 2021 at 1:23 PM
Subject: Lab results available from your provider - Register now
The Office of Institutional Research sent out four surveys -- to doctoral, master's, MFA, and executive education students -- Thursday afternoon, using Qualtrics. The following is one example.
As part of the transition from Dropbox to Google Drive for Desktop, CIS is deleting Dropbox accounts no longer nee
From: Dropbox Transfer <no-reply@dropbox.com>
Date: Tue, Mar 2, 2021 at 12:25 PM
Subject: Admin Deparment sent you some files
LastPass sent out the following legitimate email to faculty this morning. You can read more about LastPass in the CIS Knowledgebase article Intro
Look out for phone messages that scare you into canceling a high price tag order, whether to Amazon or another merchant.
Be on the look out for phone scammers who pretend to be government employees, threatening to suspend your Social Security Number, or demanding immediate payment to avoid arrest or other legal action.
From: Walter Bloom <info@bloomwalter.com> or ResourceFinder <sam@resource-finders.com>
From: PART - TIME RESEARCH ASSISTANTS <garrolinda0147@gmail.com>
Date: Mon, Feb 8, 2021 at 4:50 AM
Subject: Hiring Research Assistants
From: ON-CAMPUS JOBS <gabrieljelex7@gmail.com>
Date: Mon, Feb 8, 2021 at 4:50 AM
Subject: Hiring Research Assistants
To:
From: Dr Steven <officialsupervisorm990@gmail.com>
Date: Sat, Jan 30, 2021 at 10:32 AM
Subject: Part - Time Position!
To:
From: "Elizabeth S. Chen" <jmatu0984@gmail.com>
Subject: I need a very quick response
Date: January 23, 2021 at 14:58:17 EST
Pages
If you received one and do not see it here, please forward it to PhishBowl@brown.edu (after stripping off any attachments) so that the phishing email can be added to the page.