Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

Phishing Email (on campus)

From: There's new activity in Teams <>
Date: Mon, Jan 25, 2021 at 5:57 AM

Posted: 01/25/2021 - 1:36pm
Phishing Email (on campus)

From: ResourceFinder <>
Date: Thu, Jan 21, 2021 at 8:03 PM
Subject: Your Benefits Have Changed

Posted: 01/22/2021 - 9:46am
Phishing Email (on campus)

From: PC Solutions <>
Date: Thu, Jan 21, 2021 at 11:34 AM
Subject: Delivery Confirmed

Posted: 01/21/2021 - 1:43pm
Phishing Email (on campus)

From: New Faxmessage <>
Date: Thu, Jan 14, 2021 at 5:12 PM
Subject: Fax Mail

Posted: 01/14/2021 - 6:00pm
Phishing Email (on campus)

From: Brown <>
Date: Wed, Jan 13, 2021 at 9:55 AM
Subject: Brown Mailbox Quota warning

Posted: 01/13/2021 - 12:53pm
Phishing Email (on campus)

From: Mary Catherine Weller <>
Date: Tue, Jan 12, 2021 at 7:47 PM
Subject: FAVOR????????

Posted: 01/13/2021 - 9:13am
Legitimate Email

LastPass sent out the following legitimate email to staff this morning. You can read more about LastPass in the CIS Knowledgebase article Introdu

Posted: 01/11/2021 - 8:46am
Phishing Email (on campus)

From: Kelly Williams <>
Date: Mon, Dec 28, 2020 at 4:01 PM
Subject: RE: Approval Notice

Posted: 12/28/2020 - 5:49pm
Phishing Email (on campus)

From: It Helpdesk (via Google Drive) <>
Date: Tue, Dec 15, 2020 at 12:22 PM
Subject: Adjunct Evaluation (2).docx

Posted: 12/15/2020 - 1:21pm
Phishing Email (on campus)

From: Tracy Steffes <>
Date: Sat, Dec 12, 2020 at 11:16 AM

Posted: 12/14/2020 - 10:39am
Phishing Email (on campus)

From: Michael Band <>
Date: Sat, Dec 12, 2020 at 2:07 PM
Subject: RE: Your Grant Application

Posted: 12/14/2020 - 10:35am
Phishing Email (in the wild)

The Rhode Island Education Operations Center has received reports of an alleged RI Dept. of Health (RIDOH) contact tracer soliciting the Social Security Number of a COVID-positive student.

Posted: 12/10/2020 - 1:43pm
Phishing Email (on campus)

From: Kelly Williams <> or Michael Band <>

Posted: 12/02/2020 - 4:32pm
Phishing Email (on campus)

In this variation on the research assistant job scam, notice that the sender's address looks real (though the address does not actually exist), but when responding, you would be directed to the Reply-To address

Posted: 11/30/2020 - 4:03pm
Phishing Email (on campus)

From: Kevin McLaughlin OR Andrew G Campbell OR Christina H Paxson <>
Date: Mon, Nov 30, 2020 at 3:11 PM

Posted: 11/30/2020 - 3:24pm
Legitimate Email

The Rhode Island Department of Health (RIDOH) has begun texting test results to those enrolled in the routine COVID-19 testing program, which is in addition to the messages already sent from RIDOH through Verily and t

Posted: 11/24/2020 - 11:03am
Phishing Email (on campus)

This job solicitation email includes three tell-tale signs of being a scam: it claims to be from a Brown professor but uses a random Gmail address; asks for personal details (why is a cell phone # needed?); and includ

Posted: 11/22/2020 - 11:47am
Legitimate Email

We have added an example of this legitimate notification from University Human Resources (UHR) since receiving some questions about its authenticity.

Posted: 11/20/2020 - 11:28am
Phishing Email (on campus)

This straight-to-the-point threat from "Cybercriminals" is more hollow that heinous, and is similar to a strain of "malware sextortion" that was prevalent in 2018.

Posted: 11/19/2020 - 5:03pm
Phishing Email (in the wild)

Passing along this warning sent to the post-doc communty about a type of scam that has continued to find victims, including recently among the Brown postdoc community.

Posted: 11/18/2020 - 6:56pm
Phishing Email (on campus)

From: Thomas Serre <>
Date: Sun, Nov 8, 2020 at 9:03 PM
Subject: Urgent request

Posted: 11/09/2020 - 8:54am
Phishing Email (on campus)

From: "IT Edu (via Google Drive)" <> or ITS Service Desk (via Google Drive) <itsservhelp1010@gmail

Posted: 11/06/2020 - 2:14pm
Updated: 11/25/2020 3:15pm
Legitimate Email

We have received questions about an email from UnitedHealthcare StudentResources, due to the suspicious shortened link provided (directing recipients to a page beginning with

Posted: 11/03/2020 - 12:18pm
Phishing Email (on campus)

From: jeff ross <>
Date: Tue, Nov 3, 2020 at 2:19 AM
Subject: CMR


Posted: 11/03/2020 - 10:51am
Phishing Email (on campus)

From: Larry Larson <>
Date: Mon, Nov 2, 2020 at 4:05 PM
Subject: Work [ also a version with "Request" as Subject ]

Posted: 11/02/2020 - 4:33pm
Legitimate Email

From: PWNHealth Clinical Support <>
Date: October 30, 2020 at 1:00:53 PM EDT

Posted: 10/30/2020 - 1:42pm
Phishing Email (on campus)

From: Amanda Baile <>
Date: Thu, Oct 29, 2020 at 7:36 AM
Subject: Task

Posted: 10/29/2020 - 12:27pm
Phishing Email (on campus)

Beware the texting variation on the "Are you available?" phishing scam, with both currently being reported to the Phish Bowl.

Posted: 10/26/2020 - 12:56pm
Phishing Email (on campus)

From: Chair Department <>
Sent: Monday, October 26, 2020 11:48 AM

Posted: 10/25/2020 - 6:00pm
Updated: 10/29/2020 - 12:18pm
Legitimate Email

Some members of the Brown community have reported the following notification from the bulk email list service, which generated the email as the result of the individuals having been added to the list

Posted: 10/23/2020 - 2:23pm