UPGRADE YOUR EMAIL TO AVOID SUSPENSION help@brown.edu

Phish Bowl Alerts

This imposter email uses lots of all caps as well as the help@brown.edu address throughout, and even mentions the "SECURITY TEAM" to try and convince you it is real. Another clue is the link used for "CLICK HERE, TO UPGRADE YOUR EMAIL (beginning with https://api.viglink.com/api/....).

From: brown.edu SECURITY TEAM <patrick@casair.net>
Date: Thu, 17th Nov 2022
Subject: UPGRADE YOUR EMAIL TO AVOID SUSPENSION help@brown.edu

help@brown.edu

Your email account is currently undergoing an annual upgrade
To avoid account shutdown, please verify your email below to complete this upgrade
CLICK HERE, TO UPGRADE YOUR EMAIL