Skip to content

Phish Bowl

[Phish] Re: MBPGSA Email – Friday Night Live @ the ROM!

Details: From: [University of Toronto student] To: [University of Toronto staff member] Subject: Re: MBPGSA Email – Friday Night Live @ the ROM! Text: Hi there, I hope everything is great Here’s details you have demanded most recently. Please don’t hesitate to get the needed files as an attachment. Feel free to make contact with ... Read More

[Phish] University of Toronto

Details: From: [Redacted] To: [University of Toronto student] Subject: University of Toronto Text: Dear User, This is to inform you that our web-mail server has been scheduled for upgrade and maintenance. To avoid your e-mail account been terminated during this upgrade Send “UTORONTO UPGRADE” to (xxx) xxx-0945 You will receive instructions via text on how ... Read More

[Phish] Part-Time Personal Assistant Needed

Since May 25, the University has received several reports of a phishing scam that targets University of Toronto (U of T) students by encouraging them to “apply” for part-time work opportunities. The attack attempts to manipulate students into divulging personal information to a potential employer.  You can see two examples of these malicious emails below. For ... Read More

[Phish] Re: Quick Respond

On May 21, members the University of Toronto (U of T) community received a malicious email that impersonated a well-known division head. The attack attempted to manipulate recipients into purchasing a large quantity of iTunes gift cards.   Fortunately, the attack was thwarted by a sharp-eyed staff member who recognized the classic signs of a phishing email, including a suspicious email ... Read More

[Phish] [Redacted] shared “Doc010” with you.

This phishing email was sent to a department at the University of Toronto. The message is purportedly from someone who shares a first name with a department member, but the email address does not use a University domain. The email invites the user to access a OneDrive document that appears to be from the department’s manager, but the link is malicious.  Details: ... Read More

[Phish] Re : salary award . “The Legacy and the Promise.”

Details: From: [Redacted] <> Subject: Re : Salary Award . “The Legacy and the Promise.”   Text: Dear [Redacted] Attached is the descriptions of how staffs/faculty members has demonstrated excellence in support of the school activities progress. List of all the names of 2018 / 2019 nominees, entitled for increase in Salary  and position placement in your Years of ... Read More

[Phish] Alert

Details: From: Krishna, Vamsee <> Subject: Alert   Text: We received a request to delete your mailbox database permanently. Please reconfirm your request by choosing either of the two options below but please note that if you fail to click on option. One we will have no other choice than to delete your mailbox database immediately. ... Read More

[Phish] Update

Details: From: M Subject: Update   Text: I need to update my pay check direct deposit info Sent from my iPhone

[Phish] I advise you not to call the police.

NOTE SAMPLE ONLY. This malicious fraud attempt has been seen elsewhere, but has not been reported at the University – yet. Be aware and report if you see this or other phishes at Details: From: [redacted] Subject: I advise you not to call the police. Text: My man carried a bomb (Hexogen) into the building where your company is located. It is constructed under my direction. It can ... Read More

[Phish] Amazon : activate your account ✔

Details: From: no_repIy <> Subject: [Amazon] : Activate Your Account ✔   Text: Dear Customer, Some informations on your acount appears to be missing or incorrect, please update your account informations promptly so that you can continue to enjoy all the benefits of your Amazon account. If you don’t update your informations within 72 hours we’ll ... Read More