Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

From: Inga Leverett < leverett @oakland.edu >
Date: Wed, Nov 26, 2014 at 1:33 PM
Subject: Update
To:

Posted: 11/26/2014 - 2:15pm

From: Brown University < xxxxx_xxxx @brown.edu>
Date: Fri, Nov 21, 2014 at 3:46 PM
Subject: Message From Brown Information Security: Your email account has been compromised
To:

Posted: 11/21/2014 - 3:56pm

From: Franklin, Natalie R < natalie.r.franklin @vanderbilt.edu >
Date: Mon, Nov 17, 2014 at 10:51 AM
Subject: RE: Help Desk Important Notification ‏‏‏!

Posted: 11/17/2014 - 11:02am

​From: IRS.gov < xxxxx_xxxx @brown.edu >
Date: Sun, Nov 16, 2014 at 6:27 PM
Subject: E-file
To:

Your Revenue Record Shows You Are Still Yet To Validate.

Posted: 11/16/2014 - 7:28pm

From: WEBMASTER < xxxxx_xxxx @brown.edu >
Date: Sun, Nov 16, 2014 at 7:09 PM
Subject: Re-Validate Your School Mail Box‏‏
To:

Re-Validate- < Click Here>>

Posted: 11/16/2014 - 7:22pm

From: "IRS.gov" < xxxxx_xxxx @brown.edu >
Date: Nov 16, 2014 5:53 PM
Subject: Identity protection‏‏
To:
Cc:

Posted: 11/16/2014 - 7:19pm

The following email from Citizens Bank was reported. Follow-up with them confirmed that it was NOT phishing, but rather, a notification sent in error and can be disregarded.

Posted: 11/14/2014 - 2:10pm

From: Ritchie, Mark < m_ritchie3 @fanshawec.ca >
Date: Fri, Nov 14, 2014 at 9:02 AM
Subject: Faculty and Staff email notification
To: "Ritchie, Mark" < m_ritchie3 @fanshawec.ca >

Posted: 11/14/2014 - 9:31am

If you receive the following phishing email, you can report it to Apple at reportphishing@apple.com.

Posted: 11/12/2014 - 3:15pm

From: Email Account Team < admin @amlakshemshad.ir >
Date: Wed, Nov 12, 2014 at 2:39 AM
Subject: OUR FINAL ACCOUNT NOTICE!!!
To: help @brown.edu
 
Your mailbox is almost full.

Posted: 11/12/2014 - 3:02pm

This is being sent using a variety of invoices numbers.

From: < billing.address.updates @adp.com >
Date: Wed, Nov 12, 2014 at 11:38 AM
Subject: ADP Past Due Invoice#97818840
To:

Posted: 11/12/2014 - 2:57pm
Legitimate Email

Multiple students have inquired about this email​. The good news for the recipients is, it is quite real.

Posted: 11/12/2014 - 9:06am

From: Message Admin < martin.smith @essex.org.uk >
Date: Mon, Nov 10, 2014 at 8:42 AM
Subject: Voice Message #0913700893
To: xxxxx @brown.edu

Voice redirected message

Posted: 11/10/2014 - 9:57am

From: xxx_xxxx @brown.edu
Date: Sun, Nov 9, 2014 at 11:29 PM
Subject:
To:

See the attached for your perusal. 

[ NEFT TRANSFER#20003#.htm ]

Posted: 11/10/2014 - 9:07am

From: IRS.gov 2014 <​ gduranramirez498 @hcc.edu > ​
Date: Fri, Nov 7, 2014 at 7:28 PM < ​

Posted: 11/08/2014 - 8:51pm
Legitimate Email

The following email was reported as suspected phishing. It is, however, a legitimate email inadvertently sent as part of a security update to the Salesforce application (used with Workday).

Posted: 11/06/2014 - 12:24pm
Legitimate Email

Some members of the Brown community have sent inquiries about emails sent from NoReply @brown.edu about Workday transactions.

Posted: 11/05/2014 - 4:49pm

Be on the alert for tech support calls from an "Antivirus Company", which attempt to persuade victims to install products such as "Team Viewer" (a remote desktop tool) to remotely scan your computer.

Posted: 11/04/2014 - 2:06pm
Legitimate Email

Some members of the Biomedical community have sent inquiries regarding the legitimacy of the following email introducing the Henry Stewart Talks trial at Brown.

Posted: 10/30/2014 - 12:07pm

From: Hasan Koyuncu < hasan.koyuncu @csb.gov.tr >
Subject: YNT: Your Mailbox Is Almost Ful
Date: October 28, 2014 at 8:36:42 AM EDT
To: Hasan Koyuncu < hasan.koyuncu @csb.gov.tr >

Posted: 10/28/2014 - 11:33am

From: Paypal < support @paypl.com >
Date: Wed, Oct 22, 2014 at 2:40 PM
Subject: Your Account Will Be Limited
To: help < help @brown.edu >

Dear customer,

Posted: 10/24/2014 - 2:08pm

From: "TAYLOR, Gary (Atlanta)"< gary.taylor @exide.com >
Date: Oct 15, 2014 8:17 AM
Subject: IT HelpDesk
To:
Cc:

Posted: 10/15/2014 - 8:10pm

From: < geesres @absamail.co.za > or < boris.carvajal @electrohuila.com.co > or < pablo_c @etercor.com.ar >
Date: Thu, Oct 9, 2014 at 5:17 PM

Posted: 10/09/2014 - 11:41am

From: Painter, Joan < JPainter @tustin.k12.ca.us >
Date: Wed, Oct 8, 2014 at 8:09 AM
Subject: RE: Your password
To: "Painter, Joan"

Dear User‏‏

Posted: 10/08/2014 - 8:46am

From: IRS.gov < xxxx @brown.edu >
Date: Tue, Oct 7, 2014 at 10:52 AM

Posted: 10/07/2014 - 11:02am

The following is more like spam than phishing, but due to receiving multiple reports, it has been included in the Phish Bowl. Should you received this or something similar, mark it as spam to alert Google.

Posted: 10/02/2014 - 3:41pm

​From: Xxxx, Xxxx < ​xxxx @brown.edu >
Date: Sun, Sep 28, 2014 at 11:07 AM
Subject: CONFIDENTIAL DOCUMENT
To:

Posted: 10/01/2014 - 11:41am

From: BROWN.EDU < xxx_xxxxxx @brown.edu >
Date: Wed, Oct 1, 2014 at 9:11 AM
Subject: WEBMASTER
To:

Re-Validate- < Click Here>>

Posted: 10/01/2014 - 9:24am

From: BROWN.EDU @irs.gov or IRS.gov  < from various Brown addresses >
Date: Tue, Oct 7, 2014 at 10:12 AM
Subject: Tax Revenue Record
To:

Posted: 09/30/2014 - 10:36am

In addition to phishing emails, ISG has been hearing reports of scams coming via the telephone (sometimes called "vishing" for voice phishing).

Posted: 09/29/2014 - 1:42pm
Updated: 3/13/15 10:50am

Pages