This is the original Phishbowl, first posted in September of 2020. It features a collection of phishing emails, including examples received at Berry and others sourced from the web.
Notice the From address is not a Berry address, and the attachment is not an audio file. This is NOT what our voicemail notifications look like.
Why ask for a non-edu email address and why would an international business consultant be offering this job? Also, notice the unqualified urgency in the last sentence.
First, this email didn’t come from Microsoft. Second, check out the poor grammar. Third, OH NO! I can’t receive email!?!?!? Urgent! Last, the link does NOT go to a Microsoft address (check this in an email by hovering, not clicking, on the link).
Notice the sender name and sender address don’t match, the subject is poorly written, and the body of the email is vague. An attachment is almost always a red flag.
Notice the sender name and email don’t match, the subject instantly asks for unjustified urgency, and the body of the email is an absurd story of woe and fortune (including a business “magnet”), with a ridiculous set of questions at the end, with bad grammar throughout as a bonus.
This email came from another educational institution, but claims to be from the berry.edu “Answering Machine”. Hilarious. The attachment is NOT an audio file.
This did NOT come from Microsoft. The order number hilariously includes “RandomNumber” and “your subscription thanks you”. Does it really? The “Order Status” button does NOT link to Microsoft.
Typical sextortion email, with poor grammar and spelling, and a ridiculous story of how they accumulated all this information from your smartphone. In addition to unintentional misspelled words, Intentional misspellings used to throw off spam filters.
Unfortunately, this email was sent from a compromised account, so there is no banner to warn that it might be fraudulent. however, the grammar is still poor and the website name needs to buy a couple of vowels. Also…”kindly”, a big red flag.
Great job opportunity, right? NO! The offer is ridiculous, the grammar is poor, and schemes like this invariably are either “overpayment scams” or worse, money laundering operations.
Notice this did NOT come from Amazon. The “Verify Information” button most likely leads to a form where the scammers will steal your credit card information or Amazon password. Notice the lack of anything after the closing, just “Sincerely”. No one wants to be declined or locked out by Amazon.
The subject is vague and who is this person and why do they think they can debit my payroll? The redacted “name” was just the username part of the recipient email. Don’t click on links in unexpected emails! Poor grammar, as usual.
Sender name and email don’t match, the greeting is generic. The email is from Yandex.com, which is Russia’s answer to Google and the email is pretty vague, but it does make the mistake of asking for a copy of an “international passport”.
This email is hilarious! Terrible grammar, odd capitalization, and a crazy premise. The email basically asks you to confirm that you are dead, and if you don’t respond they will “release your funds”.
This kind of phish comes to payroll departments regularly. Notice the poor grammar, the lack of a Berry email address, and the vagueness of the request.
Typical sextortion email with a twist. The use of foreign characters is designed to slip past email filters. Other than that, this is a pretty typical attempt to convince someone they’ve been caught looking at porn. If you don’t look at porn, then no worries!
Not from a Berry address, poor grammar, ridiculous premise – here’s a list of terminations, and guess what? – you’re one of them. Contact details for “Berry College Lawyer” are in the document, along with some bonus malware, or a fake login page.
It doesn’t show it, but the big yellow banner declares that this did NOT come from a Berry account. Poor grammar and what exactly does it mean to “update their BERRY COLLEGE”? The link went to a fake login page where phishers would steal credentials. Notice the fake urgency from the triple exclamation points and the fear of “deactivation”.
Not a Berry address, username doesn’t match email in sender address, poor grammar, broken greeting. Link guaranteed to contain some malware or present a fake login screen.
This email is heavily redacted, but know this – you will never be given the option to “keep same password” as suggested here. Poor grammar can’t be redacted Also, “kindly” is used, a major red flag.
Note the sender is from Canada… there is a link to a document (and an online preview!) and it mentions an annual bonus (ha ha). Poor grammar. They say they are correcting the statement, then ask if it is correct…duh.
This one is classic. It raves about a body bag…being a piece of survival gear. No, that’s what they put you in when you don’t survive. Which is what they will do if you think it is more important than food or water. The pile of links all go to the same website, most likely filled with “drive-by” malware. And as usual – poor grammar.
A ridiculous story and poor grammar to boot. Just delete these silly investment emails.
(Visited 111 times, 2 visits today)