Office of Information Technology
December 7, 2022
Tags Phishing Email (on campus)

Payroll report from "Payroll Office |BROWN"

Phish Bowl Alerts

A spoofed HR notification that entices with a reference to money (from "Payroll Office") and mentions Brown in several places, even though the sender's email address is non-Brown. Remember, don't click links in suspicious email but "hover to discover." 

The View Report button points to www.toy.co.uk, and the myaccount.brown.edu link (which doesn't access HR details), to a URL beginning with http://www.mectronic.com/scripts/.

===================================================
From: Payroll Office |BROWN <bsorden@siue.edu>
Date: Tue, Dec 6, 2022 at 7:12 PM
Subject: Report for [josiah_carberry@brown.edu]
To: <josiah_carberry@brown.edu>

Your payroll report is now available online.

To view your message
Log in using your Net ID and password.

[ View Report Here ]

===================================================
From: Payroll | BROWN <jfaller@fullerton.edu> OR <diane@cratersandfreighters.com>
Date: Thu, Dec 1, 2022 at 8:41 PM
Subject: Important message for (josiah_carberry@brown.edu)
To: <josiah_carberry@brown.edu>

Your latest payroll information is now accessible online

https://myaccount.brown.edu/
Enter your BROWN username and password to log in.
Brown University
HR Payroll - BROWN

===================================================