Phish Bowl Alerts
A spoofed HR notification that entices with a reference to money (from "Payroll Office") and mentions Brown in several places, even though the sender's email address is non-Brown. Remember, don't click links in suspicious email but "hover to discover."
The View Report button points to www.toy.co.uk, and the myaccount.brown.edu link (which doesn't access HR details), to a URL beginning with http://www.mectronic.com/scripts/.
===================================================
From: Payroll Office |BROWN <bsorden@siue.edu>
Date: Tue, Dec 6, 2022 at 7:12 PM
Subject: Report for [josiah_carberry@brown.edu]
To: <josiah_carberry@brown.edu>
Your payroll report is now available online.
To view your message
Log in using your Net ID and password.
[ View Report Here ]
===================================================
From: Payroll | BROWN <jfaller@fullerton.edu> OR <diane@cratersandfreighters.com>
Date: Thu, Dec 1, 2022 at 8:41 PM
Subject: Important message for (josiah_carberry@brown.edu)
To: <josiah_carberry@brown.edu>
Your latest payroll information is now accessible online
https://myaccount.brown.edu/
Enter your BROWN username and password to log in.
Brown University
HR Payroll - BROWN
===================================================