Phish Bowl

The following emails are phishing attempts that have been reported by the Brown community. We advise that you do the following:

  • If you received one and do not see it here, please forward it to PhishBowl@brown.edu (after stripping off any attachments) so that the phishing email can be added to the page.
  • If you received the same email but from a different Brown address than shown, please forward it to us so that we can attend to the new compromise.
  • If you received one already posted here, please report it as phishing to the Gmail team (from within the message, click on the down arrow to the right of the REPLY button and select "Report phishing") or simply delete it.
  • More about phishing at brown.edu/go/phishing and What to do When You Spot a Phish.
  • Please note that the Phish Bowl account is actively monitored during regular business hours and periodically at other times.
Phishing Alert
Sep 19, 2014 - 1:00 pm

From: "Herndon, Kerrie A" <KHERNDON@AACPS.org>
Subject: RE: Help Desk
Date: September 19, 2014 at 12:38:40 PM EDT
To: "Herndon, Kerrie A" <KHERNDON@AACPS.org>


From: Herndon, Kerrie A
Sent: Friday, September 19, 2014 12:29 PM
Subject: Help Desk

Help desk will undergo unscheduled system maintenance today in order to improve your account. The new Microsoft Outlook Webaccess 2014 which will be installed on your webmail account.

Your present account will be deactivated to create space for the new webaccess 2014. In other to complete this process, please follow the survey by CLICK HERE. Your account will be inactive if this survey is not completed. Thank you.

IT Service Center(@)2014.            

Please consider the environment before printing this e-mail.
Phishing Alert
Sep 16, 2014 - 9:41 am

While this is not a typical phishing email, it is an example of a classic social engineering tactic that attempts to establish a trusted relationship with the sender who provides a means to unexpected wealth. We have added it to the Phish Bowl for those readers who may be unfamiliar with these so that you may be able to spot them should you receive one. If you do, after enjoying whatever entertainment value you may find in it, mark it as SPAM.

"Scammed Victims Compensation" is a type of 419 scam (see the article for explanations of related scams, including employment, lottery, online sales and rentals, pet and romance). The FBI also maintains a list of common fraud scams.  A search on Compensation Award Authority results in several examples of this type of scam.


From: John Fisher
Date: Tue, Sep 16, 2014 at 2:09 AM
Subject: Scammed Victims Compensation
To:

Hello,

I'm Dr. John Fisher... ed. T.H.Turner (London, 1855), Coll. No. *VIII, II, 263-272. 10) - Erasmus, Ep., I, 415, I'm 51yrs Old. I'm one of those that took part in the Compensation in awards many years ago and they refused to pay me, I had paid over $18,000 while in the London, trying to get my payment all to no avail.

So I decided to travel down to the Lottery Compensation company with all my compensation documents, And I was directed to meet Barrister. Larry Gold, who is the member of COMPENSATION AWARD AUTHORITY and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake.

He took me to the paying bank for the claim of my Compensation payment. Right now I'm the most happiest man on earth because I have received my compensation funds amounting to $750,000. Moreover, Mr. Larry Gold, showed me the full information of those that are yet to receive their payments and I saw your email as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you.
I will advise you to contact Mr. Larry Gold You have to contact him directly on this information below.

COMPENSATION AWARD AUTHORITY
Name : Mr. Larry Gold (Barrister)
Email: larrygoldlawfirm @ 126.com

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.

The only money I paid after I met Mr. Larry Gold was just $350 for the paper works, take note of that. So contact him through his Telephone or email address (larrygoldlawfirm @ 126.com) for him to assist you in getting your funds back.
Thank You and Be Blessed.

Dr. John Fisher... ed. T.H.Turner (London, 1855),
Coll. No. *VIII, II, 263-272. 10) - Erasmus, Ep.
Education: BS, Business Administration

Phishing Alert
Sep 15, 2014 - 4:31 pm

From: FedEx Online Services < onlineservices @fedex.com >
Date: Mon, Sep 15, 2014 at 4:02 PM
Subject: You have 1 Important Pending Shipment message
To:

FedEx(R) fedex.com

Dear Customer,

You have a very Important Pending Shipment message in your FedEx Account.

Please click the link below to update your account access

Log in to fedex.com/pending shipment

Please note that this link will expire in 48 hours from the time of your e-mail address reset request. After that time, you will need to re-start the process by logging into your online account

Thank you for choosing FedEx.

Phishing Alert
Sep 13, 2014 - 12:03 pm

This particular phishing email has been reported many times over the past few weeks. Here is the most recent example followed by variations on sender's name and title:

From: Webmaster <kyle_mccarthy @brown.edu>
Date: September 20, 2014 at 1:30:09 PM EDT
To: undisclosed-recipients:;
Subject: Re-Validate Your School Mail Box

I.T HELP-DESK
------------------------
Re-Validate-  < Click Here>>
 
NOTE: That Failure to comply may result in the loss of your account within the next 24 hours.

Signed By Webmaster.
Maintained by the Technology Department. Copyright 2014.


From: WEBMASTER < gromano489 @hcc.edu >
Date: Saturday, September 13, 2014
Subject: Re-Validate Your School Mail Box
To:


From: I.T HELP-DESK < mgama997 @hcc.edu >
Date: Wed, Aug 27, 2014 at 11:55 PM
Subject: Re-Validate Your School Mail Box
To:


From: I.T HELP-DESK  < various @brown.edu addresses >
Date: Fri, Aug 15, 2014 at 11:41 PM
Subject: Re-Validate Your School Mail Box
To:


Phishing Alert
Sep 13, 2014 - 12:02 pm

From: Brown University < karen_leong @brown.edu >
Date: Sat, Sep 13, 2014 at 9:29 AM
Subject: Account Information
To:

I.T HELP-DESK
------------------------
Re-Validate- < Click Here>>

NOTE: That Failure to comply may result in the loss of your account within the next 24 hours.

Signed By Webmaster.
Maintained by the Technology Department. Copyright 2014. 

Phishing Alert
Sep 10, 2014 - 11:31 am

Phishing Alert
Sep 9, 2014 - 10:10 am

The Phish Bowl received an alert of a "vishing" attempt (voice phishing):

This morning at approximately 9:35 I received a phone call from a blocked number. A women's voice asked me to verify the serial number on the laser jet printer near me. I asked "What is this pertaining to?".  She hung up. 

The person reporting this incident recognized that something wasn't right and acted appropriately by not providing any information to an unknown caller then contacting the Phish Bowl.

This alert is a good reminder that phishing and its social engineering ploys can arrive not only in email but via phone, text or even a knock on the door. Remember: If it smells "phishy", it probably is.

Phishing Alert
Sep 8, 2014 - 7:52 am

From: John Godinsky < barrjohngodinsky@gmail.com  >
Date: September 7, 2014 at 1:15:14 PM EDT
To: undisclosed-recipients:;
Subject: Your western union payment of $4.5m

Sunday,7 september 2014

Your western union payment of $4.5m

I have deposited the check as we agreed with western Union. All you
have to do is to contact them at ( westernunionbenin514 @ yahoo.com ) the
western union will give you direction on how you will be receiving the
funds daily. My agreement with them is $10,000 USD two time daily
until the whole of $4.5USD is transferred.You are not expected to pay
for the transfer charge as that will be deducted from the funds once
the remittance is done.

send the below information to them:

Receiver name: _________
Country:__________
Mobile Phone:________

The only f ee you will send to them before the transfer is 75USD for
paper work and send it on this information via western union

RECEIVER'S NAME.............EZEOBA MICHEL
COUNTRY.........BENIN REPUBLIC
CITY................COTONOU
QUESTION........TRUST
ANSWER............PAYMENT
AMOUNT...........$75.
M T C N............
remittance. E-mail them with above address, the contact person is Mr.
Charles Godwin, with phone number:- +229 98416772

Thank you.

Regards,
Mr John Godinsky 

Phishing Alert
Sep 6, 2014 - 9:18 am

From: < employeebenefits @ brown.edu >
Date: September 6, 2014 at 7:49:44 AM EDT
To: xxxx_xxxxx
Subject: URGENT: Your Salary Review Documents



Hello,

The University is having a salary increment program again this year with an average of 2.5%
The Human Resources department evaluated you for a raise on your next paycheck.
Click below to confirm and access your salary revision documents:

Click here to access the documents

Sincerely,

Human Resources
Brown University


NOTE: This email was also reported on August 30, and a slight variation, Your Salary Raise Confirmation, on July 26.

Phishing Alert
Sep 4, 2014 - 8:32 am

From: Asher Johnson <ajohnson@alliant.edu>
Date: September 4, 2014 at 6:21:18 AM EDT
To: Undisclosed recipients:;
Subject: HELP-DESK!!!

520MB 520MB Quota mail size 97.9%

Your password will expires TODAY CLICK-HERE-TO-ACTIVATE  <http://ithelpdeskamonteam.jigsy> your email account for 2014: to validate your E-mail.
Thanks
System Administrator
WEBMAIL PORTAL