Another variation on the "malware sextortion" scam, with this one including an old password in the receiver's address.
From: Terrance A.Todd <email@example.com>
Subject: Happy holidays and Happy New Year?
From: Christina Paxson <firstname.lastname@example.org>
Date: December 21, 2018 at 6:08:39 AM EST
While not reported here at Brown, other institutions that include universities * have been inundated with emails about phony bomb threats, in which the sender requests a sizab
The following brief email, reported by one of the people blindcopied on it, is most probably the first step in a phishing scam to hook those not paying attention to the header details.
Look out for job offers, like the following, that appear too good to be true (they usually are).
From: Terrance Todd <email@example.com>
Date: Wed, Nov 28, 2018 at 6:34 PM
The following alert, supposedly from Facebook, was reported today, providing a number of clues to its inauthenticity. Here are a few, can you spot any others?
From: Mark Spencer (via Google Drive) <firstname.lastname@example.org>
Date: Fri, Nov 16, 2018 at 11:20 AM
Sent: Thursday, November 15, 2018 3:36 PM
The ever popular "Are you available" phishing scam has been reported with a new twist: not only using a familiar Brown name and email address (though rendered improperly, see below) but also their picture.*
The Malware Sextortion Scam lives on in newly-reported phishing emails that threaten to send "crazy images from your dark secret life" and block your system if you do not reply within 48 hours.
The following spoofed email -- targeting some at Brown with the request "to do something for me a ASAP" -- tries to trick the recipient into thinking it is from someone they know.
The "Chinese Consulate" call is back (see 9/10 Phish Bowl post), with the same repeated message in Mandarin but with new numbers and differen
Be on the lookout for a scam that first appeared back in the 70's -- dubbed "phoner toner" -- which was recently reported here at Brown.
Phishing tip: Make sure the email sender's address passes the "domain test".
From: Amazon <email@example.com>
Date: Tue, Oct 30, 2018 at 6:19 PM
Subject: Amazon Account Suspened
From: Jane Pisasale via Adobe Document Cloud <firstname.lastname@example.org>
Date: Tue, Oct 30, 2018 at 7:50 AM
Subject: Executed Contract
We continue to receive reports of emails that threaten to send videos of their victims to their contacts unless the victims send them hundreds of dollars in bitcoins within 48 hours.
From: Gregory Fletcher <Gregory.Fletcher@ocsarts.net>
Date: Mon, Oct 15, 2018 at 12:26 PM
Subject: Re: ACH payment
From: Jana Doe <email@example.com>
Date: Mon, Oct 15, 2018 at 8:10 AM
From: Doug Thomson <firstname.lastname@example.org>
Date: Fri, Sep 28, 2018 at 5:54 PM
Subject: Re: Meeting on Tuesday
Another scam hitting University phones to avoid: a robocall that warns your account has been suspended and you need to respond to the call for your account to be reactivated.
Beware of the latest phone scam from a caller asking for organizational information, claiming to be from HR and providing a Brown staff member name that does not match the phone number in the online directory.
Beware of calls that appear to be coming from the Chinese Consulate that leave a repeated message in Mandarin, from numbers such as +12122449399 and +12122448293 but also with various area codes and prefixes.
Your phone rings -- you glance at the caller ID and notice that the number looks similar to yours -- so you answer it assuming it's someone you know but haven't put in your contact list yet.
From: email@example.com <firstname.lastname@example.org>
Date: Thu, Aug 23, 2018 at 1:01 AM
Members of the Brown community continue to report having received a phishy message from BrightCrowd.
In this clever scam, the sender referenced an actual Dell order that had payment processing issues and provided the correct associated number.
From: BROWN UNIVERSITY HELP DESK [various @yahoo addresses] OR
MIDLAND COLLEGE HELP DESK email@example.com