Welcome to the Phish Bowl

About phishing

Phishing is a type of online scam where criminals send an email that appears to be from a legitimate company and ask you to provide sensitive information. This is usually done by including a link that will appear to take you to the company’s website to fill in your information – but the website is a clever fake and the information you provide goes straight to the crooks behind the scam.

The term ’phishing’ is a spin on the word fishing, because criminals are dangling a fake ’lure’ (the email that looks legitimate, as well as a website that looks legitimate) hoping users will ’bite’ by providing the information the criminals have requested – such as credit card numbers, account numbers, passwords, usernames, and more.

How do I spot a phishing email?

  • The email doesn’t specify your name.

"Dear Customer" or “Dear” isn’t an identifier. If you receive an email like this, there is a very high chance that this is a phishing email.

  • The email asks you to confirm personal information.

Keep an eye out for emails requesting you to confirm personal information that you normally do not disclose.

3 signs you are possibly being scammed:

1. You are being pressured to act immediately. Scammers may pose as someone or an organization you know and say there is a problem that needs immediate attention. DO NOT act unless you have verified the person who has contacted you is legitimate.

2. You're asked to provide personal information and/or verification codes. When in doubt, DO NOT disclose this type of information. Most organizations will not ask for this information when conducting business with you.

3. You're asked to pay or submit payment in an unusual way. Be wary if you are asked to pay by gift cards, payment apps, or digital currency.

These are the latest campaigns seen by the Information Security Office. If you receive any other kinds of scamming or phishing messages, please forward the message to phishing@rice.edu.

09/22/2025-11/20/2025

Today: Complimentary Membership + a Ninja CREAMi Ice Cream Maker Don't Miss: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Complimentary Membership + Ninja CREAMi Ice Cream Maker - This Day Only Today: Ninja CREAMi Ice Cream Maker with Your CompIimentary Membership Ray, you're now a member of Ninja Creami Group/Recipes Complimentary Membership Today: Ninja CREAMi Ice Cream Maker Last Chance Complimentry Membership + Ninja CREAMi Ice Cream Maker: Last Chance Today Today Only: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Win Jackets, Gift Cards, Watches, Food, Candy, Ninja Creami, Snow Globes & A Holiday Sweater Instant Win! ⌚ 🍝 🍦 Last Chance: Complimentry Membership + Ninja CREAMi Ice Cream Maker Today Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker – Today Only Cozy Up with Gusto TV: Win a Ninja Creami & Get 10% Off WoodForChef Boards! Last Chance Today: Complimentry Membership + Ninja CREAMi Ice Cream Maker Complimentary Membership + Ninja CREAMi Ice Cream Maker – Today's Last Chance Complimentry Membership: Ninja CREAMi Ice Cream Maker, Last Chance Today Today: Complimentery Membership + Ninja CREAMi Ice Cream Maker Last Chance Last Chance Today - Complimentry Membership Ninja CREAMi Ice Cream Maker Today: Last Chance for Complimentry Membership + Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker: Complimentary Membership Today Only Today Only: Complimentery Membership PLUS Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker PLUS Complimentery Membership Complimentary Membership + Ninja CREAMi Ice Cream Maker: Last Chance Today Today Only: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only: PLUS Ninja CREAMi Ice Cream Maker Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker, Today Only Today Only: Ninja CREAMi Ice Cream Maker Plus Complimentry Membership Complimentery Membership: Today Only + Ninja CREAMi Ice Cream Maker Today Only: Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only - CompIementary Membership Ninja CREAMi Ice Cream Maker Don't Miss Out: Today Only - Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Only - Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only: Get Your Complimentary Membership and Ninja CREAMi Last Chance: Complimentary Membership + a Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker with Complimentary Membership Today Only Today Only: Complimentary Membership and Ninja CREAMi Ice Cream Maker Included Today Only: Get Your Complimentary Membership + Ninja CREAMi Maker Ninja CREAMi Ice Cream Maker + Complimentary Membership: Today Only Today Only: Get a Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker + Complimentary Membership Today Only: Your Complimentary Membership and Ninja CREAMi Ice Cream Maker Don't Miss Out Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker Don't Miss Today: Complimentary Membership Ninja CREAMi Ice Cream Maker Today: Complimentary Membership with a Bonus Ninja CREAMi Ice Cream Maker Your Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker For Today: Complimentary Membership Ninja CREAMi Ice Cream Maker Last Chance Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker Don't Miss: Ninja CREAMi Ice Cream Maker + Complimentary Membership Today Ninja CREAMi Ice Cream Maker + CompIimentary Membership: Today Only Homemade Ice Cream, Sorbets & More - Free Ninja Creami! Today Only: Ninja CREAMi Ice Cream Maker Membership Ninja CREAMi Ice Cream Maker Today + CompIimentary Membership Today Only: Enjoy a Courtesy Membership + Ninja CREAMi Ice Cream Maker Today OnIy: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Receive a Ninja CREAMi Ice Cream Maker + Complimentary Membership – Today Only Today Only: CIaim Your Ninja CREAMi Ice Cream Maker + 12/month Courtesy Membership CompIimentary Membership + Ninja CREAMi Ice Cream Maker Don’t Miss: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Just for Today: Complimentary Membership and Ninja CREAMi Ice Cream Maker Undeliverable: Complimentary Membership Today: Ninja CREAMi Ice Cream Maker Last Chance Undeliverable: Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Win Jackets, Gift Cards, Watches, Food, Candy, Ninja Creami, Snow Globes & A Holiday Sweater Instant Win! ⌚ 🍝 🍦 Undeliverable: Last Chance Today: Complimentry Membership + Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker + Last Chance: Complimentary Membership Today Last Chance Today - Complimentry Membership Ninja CREAMi Ice Cream Maker Today: Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker Today Only: Membership Complimentary PLUS Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker with Complimentary Membership Today: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Today: Complimentary Membership Ninja CREAMi Ice Cream Maker, Last Chance Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only PLUS Ninja CREAMi Ice Cream Maker Today Only: Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker Complimentary Membership

This appears to be afinancial scam. The link redirects to a survey that appears to be from Costco, and then further redirects to a data harvesting page, requesting payment of the shipping cost to receive the ice cream maker.

From: <c0stc0announcement@crispbranchlo[.]com C0STC0Announcement@sasabunehawaii[.]com C0STC0SpeciaIAnnouncement@threebeatsjewelry[.]com C0STC0MemberSpeciaI@thebenifitshub[.]com groupupdates@facebookmail[.]com c0stc0member@answerthepubilc[.]com c0stc0member81@answerthepubilc[.]com c0stc0h5@answerthepubilc[.]com c0stc0kl@answerthepubilc[.]com c0stc0er@cookcarson[.]com c0stc0@answerthepubilc[.]com joinc0stc0-route@letsplaywithbals[.]com yourc0stc0me@americanstockdog[.]com admin@nikkisfreebiejeebies[.]com c0stc0@brightbranchvt[.]com ccgn@brightbranchvt[.]com c0stc0@brisktrailqg[.]com c0stc0member@brisktrailqg[.]com c0stc0member78@brisktrailqg[.]com cmtbf@brisktrailqg[.]com c0stc0pp@brisktrailqg[.]com c0stc0-route@brisktrailqg[.]com c0stc0member-visit@brisktrailqg[.]com c0stc0-next@safeklads[.]com marketing@gustotv[.]com c0stc0member94@globolandiaperu[.]com c0stc0member-page@globolandiaperu[.]com c0stc0visi@globolandiaperu[.]com cmi7s@globolandiaperu[.]com c0stc026@globolandiaperu[.]com c0stc0member72@globolandiaperu[.]com c0stc0member@globolandiaperu[.]com c0stc0nq@globolandiaperu[.]com c0stc0@globolandiaperu[.]com cmiff@globolandiaperu[.]com memberlink@vikingkata[.]com memberbi@propertyliv[.]com cmiu9@calssroom[.]com yourc0stc0me52@autoexpo2011[.]com c0stc0member-flow@snakebitetactical[.]com c0stc0-page@randstdusa[.]com c0stc0shoppi@randstdusa[.]com c0stc0vs@snakebitetactical[.]com c0stc0n7@snakebitetactical[.]com c0stc0-link@snakebitetactical[.]com c0stc0-path@snakebitetactical[.]com c0stc0basesp@tryvexcapital[.]com c0stc0x6@tryvexcapital[.]com c0stc0basesp72@tryvexcapital[.]com c0stc0basesp63@tryvexcapital[.]com cbscb@tryvexcapital[.]com c0stc0@tryvexcapital[.]com c0stc0basesp-route@tryvexcapital[.]com c0stc0stag@tryvexcapital[.]com c0stc0flow@tryvexcapital[.]com mycostco@vemprafestaesperanca[.]com mycostcopath@vemprafestaesperanca[.]com mycostco-path@vemprafestaesperanca[.]com ss30@giscoders[.]com costcoda@wildanimalvet[.]com membershipat27@myaccessflordia[.]com specialc0stc@wildanimalvet[.]com c0stc0-page@ayoubsvt[.]com costco@cutiesescorts[.]com specialc0stc@crispponder.us c0stc0@brightstonexw[.]com c0stc0flow@umworkday[.]com c0stc0@urmomfat[.]com cs1j@tradewindsthegame[.]com costco@tradewindsthegame[.]com costcosaving78@tradewindsthegame[.]com cshx@tradewindsthegame[.]com costcosaving@tradewindsthegame[.]com costcolink@tradewindsthegame[.]com cscv@tradewindsthegame[.]com costcosaving63@tradewindsthegame[.]com specialcostc11@tradewindsthegame[.]com special-path@tradewindsthegame[.]com special@tradewindsthegame[.]com specialcostc@tradewindsthegame[.]com specialle@tradewindsthegame[.]com specialpath@tradewindsthegame[.]com scob0@tradewindsthegame[.]com scoqy@tradewindsthegame[.]com c0stc0link@tri-unity[.]com c0stc0update-stage@tri-unity[.]com C0STC0SpeciaIs@eronudeart[.]com cnla@samayakk[.]com c0stc0news@samayakk[.]com C0STC0WholesaIeChanges@thesarurs[.]com C0STC0SpeciaI@morganproperies[.]com C0STC0WeekIy@green-fitness[.]com C0STC0Memo@bhphto[.]com C0STC0Membership@schoologylogin[.]com C0STC0Communication@mendelsonmedspa[.]com C0STC0Announcement@vfw7165[.]com C0STC0Advisory@ecombats[.]com C0STC0SpeciaI@novelarticles[.]com C0STC0Notification@faleppo[.]com C0STC0Connect@listonyc[.]com C0STC0Perks@newrick[.]com C0STC0Daily@inkbubba[.]com C0STC0Connection@wsapr[.]com C0STC0Support@tintdemo[.]com C0STC0Feedback@nabandgo[.]com C0STC0Center@casearb[.]com C0STC0Access@sfergie[.]com C0STC0Announcement@wtwenty[.]com C0STC0MemberStatus@gcgadmin[.]com C0STC0Services@elyblues[.]com C0STC0MemberPlus@jesolice[.]com myC0STC0Membership@atsfamily[.]com ImportantC0STC0MemberSpec@twinslandscapingwa[.]com C0STC0SpeciaI@dpxworlwide[.]com LimitedCostcoGiveaway@dranova[.]com CostcoAnnouncement@ciudadseries[.]com CostcoMemberUpdate@socialsecutiy[.]com CostcoHouse@flinzor[.]com C0STCOSpecial@mistylist[.]com C0STC0SpeciaI@latmpromomadruga[.]com CostcoMembersNotice@tendesy[.]com CostcoCourtesySpeciaI@qddfdp[.]com CostcoWeeklySpeciaI@letflixe[.]com CostcoSpeciaI@iasaadmin[.]com c0stc0@cookcarson[.]com c0stc0-path@brisktrailqg[.]com cmib2@globolandiaperu[.]com costcoflow@trustedpartnetft[.]com costcoey@trustedpartnetft[.]com your@autoexpo2011[.]com cs1a@tryvexcapital[.]com c0stc0srout@inastamed[.]com special@tryvexcapital[.]com c0stc0basesp-link@inastamed[.]com costcoe0@xvidwis[.]com costcoun@xvidwis[.]com cmutj@xvidwis[.]com costcoh5@xvidwis[.]com mycostcomemb33@vemprafestaesperanca[.]com mycostcomemb@vemprafestaesperanca[.]com specialvisi@tradewindsthegame[.]com mmdl@wwwjotform[.]com membershipmy60@wwwjotform[.]com membershipmy@wwwjotform[.]com membershipmy-route@wwwjotform[.]com>
09/22/2025-11/20/2025
Subject: Today: Complimentary Membership + a Ninja CREAMi Ice Cream Maker Don't Miss: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Complimentary Membership + Ninja CREAMi Ice Cream Maker - This Day Only Today: Ninja CREAMi Ice Cream Maker with Your CompIimentary Membership Ray, you're now a member of Ninja Creami Group/Recipes Complimentary Membership Today: Ninja CREAMi Ice Cream Maker Last Chance Complimentry Membership + Ninja CREAMi Ice Cream Maker: Last Chance Today Today Only: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Win Jackets, Gift Cards, Watches, Food, Candy, Ninja Creami, Snow Globes & A Holiday Sweater Instant Win! ⌚ 🍝 🍦 Last Chance: Complimentry Membership + Ninja CREAMi Ice Cream Maker Today Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker – Today Only Cozy Up with Gusto TV: Win a Ninja Creami & Get 10% Off WoodForChef Boards! Last Chance Today: Complimentry Membership + Ninja CREAMi Ice Cream Maker Complimentary Membership + Ninja CREAMi Ice Cream Maker – Today's Last Chance Complimentry Membership: Ninja CREAMi Ice Cream Maker, Last Chance Today Today: Complimentery Membership + Ninja CREAMi Ice Cream Maker Last Chance Last Chance Today - Complimentry Membership Ninja CREAMi Ice Cream Maker Today: Last Chance for Complimentry Membership + Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker: Complimentary Membership Today Only Today Only: Complimentery Membership PLUS Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker PLUS Complimentery Membership Complimentary Membership + Ninja CREAMi Ice Cream Maker: Last Chance Today Today Only: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only: PLUS Ninja CREAMi Ice Cream Maker Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker, Today Only Today Only: Ninja CREAMi Ice Cream Maker Plus Complimentry Membership Complimentery Membership: Today Only + Ninja CREAMi Ice Cream Maker Today Only: Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only - CompIementary Membership Ninja CREAMi Ice Cream Maker Don't Miss Out: Today Only - Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Only - Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only: Get Your Complimentary Membership and Ninja CREAMi Last Chance: Complimentary Membership + a Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker with Complimentary Membership Today Only Today Only: Complimentary Membership and Ninja CREAMi Ice Cream Maker Included Today Only: Get Your Complimentary Membership + Ninja CREAMi Maker Ninja CREAMi Ice Cream Maker + Complimentary Membership: Today Only Today Only: Get a Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker + Complimentary Membership Today Only: Your Complimentary Membership and Ninja CREAMi Ice Cream Maker Don't Miss Out Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker Don't Miss Today: Complimentary Membership Ninja CREAMi Ice Cream Maker Today: Complimentary Membership with a Bonus Ninja CREAMi Ice Cream Maker Your Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker For Today: Complimentary Membership Ninja CREAMi Ice Cream Maker Last Chance Today: Complimentary Membership + Ninja CREAMi Ice Cream Maker Don't Miss: Ninja CREAMi Ice Cream Maker + Complimentary Membership Today Ninja CREAMi Ice Cream Maker + CompIimentary Membership: Today Only Homemade Ice Cream, Sorbets & More - Free Ninja Creami! Today Only: Ninja CREAMi Ice Cream Maker Membership Ninja CREAMi Ice Cream Maker Today + CompIimentary Membership Today Only: Enjoy a Courtesy Membership + Ninja CREAMi Ice Cream Maker Today OnIy: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Receive a Ninja CREAMi Ice Cream Maker + Complimentary Membership – Today Only Today Only: CIaim Your Ninja CREAMi Ice Cream Maker + 12/month Courtesy Membership CompIimentary Membership + Ninja CREAMi Ice Cream Maker Don’t Miss: Complimentary Membership + Ninja CREAMi Ice Cream Maker Today Just for Today: Complimentary Membership and Ninja CREAMi Ice Cream Maker Undeliverable: Complimentary Membership Today: Ninja CREAMi Ice Cream Maker Last Chance Undeliverable: Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Win Jackets, Gift Cards, Watches, Food, Candy, Ninja Creami, Snow Globes & A Holiday Sweater Instant Win! ⌚ 🍝 🍦 Undeliverable: Last Chance Today: Complimentry Membership + Ninja CREAMi Ice Cream Maker Ninja CREAMi Ice Cream Maker + Last Chance: Complimentary Membership Today Last Chance Today - Complimentry Membership Ninja CREAMi Ice Cream Maker Today: Complimentary Membership PLUS Ninja CREAMi Ice Cream Maker Today Only: Membership Complimentary PLUS Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker with Complimentary Membership Today: Complimentry Membership PLUS Ninja CREAMi Ice Cream Maker Today: Complimentary Membership Ninja CREAMi Ice Cream Maker, Last Chance Today’s Last Chance: Complimentary Membership + Ninja CREAMi Ice Cream Maker Complimentary Membership Today Only PLUS Ninja CREAMi Ice Cream Maker Today Only: Complimentery Membership Ninja CREAMi Ice Cream Maker Today Only: Ninja CREAMi Ice Cream Maker Complimentary Membership
To: undisclosed-recipients

45978

Adorable gift for a lovely home/studio or for an aspiring musician !

The attacker impersonates a Rice community member and attempts to establish contact by claiming to offer a free muscial instruments.

From: <evschel2084@gmail[.]com>
45978
Subject: Adorable gift for a lovely home/studio or for an aspiring musician !
To: undisclosed-recipients

Started on October 21, 2025.

Payroll Update - Revised Salary & Performance Bonus

This phishing attempt uses the lure of a payroll increase and bonus to trick the user into scanning a QR code which leads to a fake Microsoft login page designed to steal their credentials.

From: <Falsified Header.>
Started on October 21, 2025.
Subject: Payroll Update - Revised Salary & Performance Bonus
To: undisclosed-recipients

Mon, 10 Nov 2025 16:08:19 PM (CST)

RICE UNIVERSITY QUICK NOTICE

The scammer claims that they have a job for Rice University undergraduate and graduate students. The email includes a Google Form link for the recipients' personal account information.

From: <sms28@rice[.]edu>
Mon, 10 Nov 2025 16:08:19 PM (CST)
Subject: RICE UNIVERSITY QUICK NOTICE
To: undisclosed-recipients

Thu, 06 Nov 2025 07:19:09 AM (CST)

Research Internship at Rice University

Fake research internship post phishing for personal phone number and email. From lawbg49@gmail[.]com and asks users to reply to Mathwhn@gmail[.]com.

From: <lawbg49@gmail[.]com>
Thu, 06 Nov 2025 07:19:09 AM (CST)
Subject: Research Internship at Rice University
To: undisclosed-recipients

45959

EXECUTIVE REMOTE PERSONAL ASSISTANT NEEDED

Phishing email (job scam) with a malicious Google form sent from a compromised account.

From: <rn37@rice[.]edu>
45959
Subject: EXECUTIVE REMOTE PERSONAL ASSISTANT NEEDED
To: undisclosed-recipients

45958

ACT NOW ANNOUNCEMENT

Phishing email with a malicious Google from sent from a compromised account.

From: <kd72@rice[.]edu>
45958
Subject: ACT NOW ANNOUNCEMENT
To: undisclosed-recipients

2025/10/20 - 14:17:20 (UTC -05:00)

Payroll Schedule Changes

The phishing email directs recipients to a spoofed Rice identity page created to harvest credentials.

From: <yup56kuc@uni-duesseldorf[.]de>
2025/10/20 - 14:17:20 (UTC -05:00)
Subject: Payroll Schedule Changes
To: undisclosed-recipients

2025/10/20 - 13:22:48 (UTC -05:00)

Piano Gift Needed Suitable Home Yamaha Free Piano For Rice University Yamaha Free Piano Piano Gift For : - Rice University Offer Free Piano Gift Piano seeking a new home Quick Note About a Grand Piano Beloved piano needs a new home Quick Piano Question for You Grand Piano – Can You Help? Yamaha Grand Piano – Just Checking In Looking for a Baby Grand Piano? Baby Grand Piano

The attacker impersonates a Rice community member and attempts to establish contact by claiming to offer a free piano.

From: <alpertlinda121@gmail[.]com mw2322277@gmail[.]com shuchenchen@hotmail[.]com dramospatel@gmail[.]com wf5168505@gmail[.]com t25985115@gmail[.]com musicalxellence@gmail[.]com boogieofficialbig104@gmail[.]com jaesteves96@outlook[.]com angelicacordrey1965@outlook[.]com>
2025/10/20 - 13:22:48 (UTC -05:00)
Subject: Piano Gift Needed Suitable Home Yamaha Free Piano For Rice University Yamaha Free Piano Piano Gift For : - Rice University Offer Free Piano Gift Piano seeking a new home Quick Note About a Grand Piano Beloved piano needs a new home Quick Piano Question for You Grand Piano – Can You Help? Yamaha Grand Piano – Just Checking In Looking for a Baby Grand Piano? Baby Grand Piano
To: undisclosed-recipients

2025/10/14 - 19:34:24

Submission Posted

Attacker sent fake job opportunities to harvest personal data.

From: <nishatmaknojiya@rice[.]edu>
2025/10/14 - 19:34:24
Subject: Submission Posted
To: undisclosed-recipients

Tue, 14 Oct 2025 15:01:20 PM (CDT)

Administrative assistant needed

Phishing email with a malicious Google from sent from a compromised account.

From: <kv37@rice[.]edu>
Tue, 14 Oct 2025 15:01:20 PM (CDT)
Subject: Administrative assistant needed
To: undisclosed-recipients

Thu Oct 16 2025 22:50:32 GMT-0500 (Central Daylight Time)

RICE ALERT-IMPORTANT NOTICE

States recipients account is flagged for deactivation and that they must verify their status by following the embedded link.

From: <anthony.i.hall@rice[.]edu>
Thu Oct 16 2025 22:50:32 GMT-0500 (Central Daylight Time)
Subject: RICE ALERT-IMPORTANT NOTICE
To: undisclosed-recipients

Thu, 16 Oct 2025 15:33:43 PM (CDT)

URGENT NOTICE

This phishing email, sent from a compromised Rice account, impersonates Microsoft to trick users into entering their passwords on a fake Google Form under the false claim of Office 365 account deactivation.

From: <rg78@rice[.]edu>
Thu, 16 Oct 2025 15:33:43 PM (CDT)
Subject: URGENT NOTICE
To: undisclosed-recipients

2025/10/16 - 10:26:19 (UTC -05:00)

VERIFY YOUR ACCOUNT

This phishing email, sent from a compromised Rice account, impersonates Microsoft to trick users into entering their passwords on a fake Google Form under the false claim of Office 365 account deactivation.

From: <rrg5@rice[.]edu>
2025/10/16 - 10:26:19 (UTC -05:00)
Subject: VERIFY YOUR ACCOUNT
To: undisclosed-recipients

Tue Oct 14 2025 15:51:06 GMT-0500 (Central Daylight Time)

EMAIL VERIFICATION UPDATED PROPOSAL URGENT NOTICE

This phishing email, sent from a compromised Rice account, impersonates Microsoft to trick users into entering their passwords on a fake Google Form under the false claim of Office 365 account deactivation.

From: <jz153@rice[.]edu njb4@rice[.]edu ql29@rice[.]edu lk75@rice[.]edu>
Tue Oct 14 2025 15:51:06 GMT-0500 (Central Daylight Time)
Subject: EMAIL VERIFICATION UPDATED PROPOSAL URGENT NOTICE
To: undisclosed-recipients

Tue, 14 Oct 2025 08:45:46 AM (CDT)

TERMINATE OFFICE 365 ACCOUNT

This phishing email, sent from a compromised Rice account, impersonates Microsoft to trick users into entering their passwords on a fake Google Form under the false claim of Office 365 account deactivation.

From: <xf22@rice[.]edu>
Tue, 14 Oct 2025 08:45:46 AM (CDT)
Subject: TERMINATE OFFICE 365 ACCOUNT
To: undisclosed-recipients

Fri, 19 Sep 2025 12:29:46 PM (CDT) Thu, 09 Oct 2025 10:08:54 AM (CDT)

TRS-Pension Review

Claims to be Ryan Janz from appreciation financial, but the real Ryan Janz works for a different company. Attempts to get users to click on malicious scheduling link.

From: <appreciationfinancial[.]0330@gmail[.]com appreciationfinancial[.]444@gmail[.]com appreciationfinancial[.]888@gmail[.]com>
Fri, 19 Sep 2025 12:29:46 PM (CDT) Thu, 09 Oct 2025 10:08:54 AM (CDT)
Subject: TRS-Pension Review
To: undisclosed-recipients

Sun, 28 Sep 2025 20:30:13 PM (CDT).

Verify Now 09/28/2025.

Impersonating university IT, this phish threatens Microsoft 365 deactivation and urges you to “verify” via a link that asks for your password, leading to credential theft.

From: <sb238@rice[.]edu>
Sun, 28 Sep 2025 20:30:13 PM (CDT).
Subject: Verify Now 09/28/2025.
To: undisclosed-recipients

2025/09/24 - 14:27:00 (UTC -05:00)

Subject: [All Staff] Staff Assessment Reports – Sept 24–25

Impersonating HR, this phishing email uses a generic “Dear Team” greeting and a tempting “View Your Assessment Report” link to send you to a fake login page and steal your credentials.

From: <nicole.sorto@austinisd[.]org>
2025/09/24 - 14:27:00 (UTC -05:00)
Subject: Subject: [All Staff] Staff Assessment Reports – Sept 24–25
To: undisclosed-recipients

Tue, 23 Sep 2025 15:38:01 PM (CDT)

Subject: [All Staff] 2025 Individual Assessment Reports

Posing as HR, this phishing email dangles a “performance review report” and a View Your Assessment Report link to trick you into clicking through to a credential-harvesting login page.

From: <tloecke3@huskers[.]com>
Tue, 23 Sep 2025 15:38:01 PM (CDT)
Subject: Subject: [All Staff] 2025 Individual Assessment Reports
To: undisclosed-recipients

45923

Exclusive MacBook Pro Offer for Rice Students (+1 205 897 9426) Exclusive MacBook Pro Offer for Rice Students (+1 231 434 2196)

This is a phishing scam posing as Rice/Apple, using urgency, an off-channel “text this number” instruction,.

From: <hdm1@rice[.]edu>
45923
Subject: Exclusive MacBook Pro Offer for Rice Students (+1 205 897 9426) Exclusive MacBook Pro Offer for Rice Students (+1 231 434 2196)
To: undisclosed-recipients

09/23/2025 ~15:00

Exclusive Donation Opportunity for Selected Students – (+1 1 231 434 2196)

Financial scam using an emotional appeal, fake details of donating musical instruments, and asking for a shipping fee to trick students into sending money.

From: <pn22@rice[.]edu>
09/23/2025 ~15:00
Subject: Exclusive Donation Opportunity for Selected Students – (+1 1 231 434 2196)
To: undisclosed-recipients

45923

Exclusive Donation Opportunity for Selected Students – (+1 1 231 434 2196)

Financial scam using an emotional appeal, fake details of donating musical instruments, and asking for a shipping fee to trick students into sending money.

From: <pn22@rice.edu>
45923
Subject: Exclusive Donation Opportunity for Selected Students – (+1 1 231 434 2196)
To: undisclosed-recipients

Tue, 23 Sep 2025 12:56:59 PM (CDT).

Subject: [All Staff] 2025 Individual Assessment Reports – Now Available (Sep 23 to Sept 25)

Posing as HR, this phishing email dangles a “performance review report” and a View Your Assessment Report link to trick you into clicking through to a credential-harvesting login page.

From: <crysta.wohleb@austinisd[.]org matthew.gonterman@austinisd[.]org eugene.salazar@austinisd[.]org>
Tue, 23 Sep 2025 12:56:59 PM (CDT).
Subject: Subject: [All Staff] 2025 Individual Assessment Reports – Now Available (Sep 23 to Sept 25)
To: undisclosed-recipients

Mon, 22 Sep 2025 14:09:26 PM (CDT).

Mon, 22 Sep 2025 14:09:26 PM (CDT).

Posing as HR, this phishing email dangles a “performance review report” and a View Your Assessment Report link to trick you into clicking through to a credential-harvesting login page.

From: <damian.esponda@austinisd[.]org>
Mon, 22 Sep 2025 14:09:26 PM (CDT).
Subject: Mon, 22 Sep 2025 14:09:26 PM (CDT).
To: undisclosed-recipients

Mon, 22 Sep 2025 16:11:55 PM (CDT).

Exclusive MacBook Pro Offer To Rice Student +1 205 897-9426.

This is a phishing scam posing as Rice/Apple, using urgency, an off-channel “text this number” instruction, and a $185 “shipping” fee to steal money and personal info—legitimate programs use official channels and don’t charge fees.

From: <jw327@rice[.]edu>
Mon, 22 Sep 2025 16:11:55 PM (CDT).
Subject: Exclusive MacBook Pro Offer To Rice Student +1 205 897-9426.
To: undisclosed-recipients

Mon, 22 Sep 2025 16:32:35 PM (CDT)

MacBook Pro (M3) Distribution – Limited Access for Eligible Students Contact : +1 231 434 2196

This is a phishing scam posing as Rice/Apple, using urgency, an off-channel “text this number” instruction, and a $185 “shipping” fee to steal money and personal info—legitimate programs use official channels and don’t charge fees.

From: <dg111@rice[.]edu>
Mon, 22 Sep 2025 16:32:35 PM (CDT)
Subject: MacBook Pro (M3) Distribution – Limited Access for Eligible Students Contact : +1 231 434 2196
To: undisclosed-recipients

Mon, 22 Sep 2025 16:06:42 PM (CDT)

Exclusive MacBook Pro Offer To Rice Student +1 231 434 2196

This is a phishing scam posing as Rice/Apple, using urgency, an off-channel “text this number” instruction, and a $185 “shipping” fee to steal money and personal info—legitimate programs use official channels and don’t charge fees.

From: <jn105@rice[.]edu>
Mon, 22 Sep 2025 16:06:42 PM (CDT)
Subject: Exclusive MacBook Pro Offer To Rice Student +1 231 434 2196
To: undisclosed-recipients

2025/09/17 - 17:43:15 (UTC -05:00)

2025 Performance Evaluation Report – Action Required

Phishing message posing as HR about a performance review that urges clicking an external form link to harvest credentials.

From: <jtinsley@wsa[.]net>
2025/09/17 - 17:43:15 (UTC -05:00)
Subject: 2025 Performance Evaluation Report – Action Required
To: undisclosed-recipients

2025-09-05T09:26:44-06:00

Student Emergency Fund - Outcome

This phishing email falsely claims the recipient has won money to trick them into entering their password on a fraudulent link.

From: <bp51@rice[.]edu>
2025-09-05T09:26:44-06:00
Subject: Student Emergency Fund - Outcome
To: undisclosed-recipients

01 Sep 2025 11:27:41 AM (CDT)

Rice University,Act Email Verification Rice University Update!!! Earn $650 Weekly – Flexible Work Opportunity

This phishing email tries to scare the recipient into clicking a fake Google Form link and entering their password by threatening to delete their school account if they don’t ‘verify’ it.

From: <mj60@rice[.]edu sy59@rice[.]edu rg163@rice[.]edu ns121@rice[.]edu kh218@rice[.]edu ljz2@rice[.]edu>
01 Sep 2025 11:27:41 AM (CDT)
Subject: Rice University,Act Email Verification Rice University Update!!! Earn $650 Weekly – Flexible Work Opportunity
To: undisclosed-recipients

2025/08/27 - 01:51:47 (UTC -05:00)

RICE to Name and Last Name RICE Private Letter to Name and Last Name RICE - Name and Last Name RICE Mail to Name and Last Name

The email contained an attachment about a fake income update, with the sender impersonating HR.

From: <SDavalos@familyleisure[.]com>
2025/08/27 - 01:51:47 (UTC -05:00)
Subject: RICE to Name and Last Name RICE Private Letter to Name and Last Name RICE - Name and Last Name RICE Mail to Name and Last Name
To: undisclosed-recipients

2025/08/26 - 13:40:14 (UTC -05:00)

Earn $650 Weekly – Flexible Work Opportunity

Scammer send fake job opportunities to ask recipients to fill in personal information.

From: <so56@rice[.]edu>
2025/08/26 - 13:40:14 (UTC -05:00)
Subject: Earn $650 Weekly – Flexible Work Opportunity
To: undisclosed-recipients

2025-08-25 at 15:00:30

Rice University Update!!!

This phishing email attempts to trick the recipient into providing their password through a fake verification link by threatening that their school email account will be permanently deleted.

From: <ab230@rice[.]edu ar236@rice[.]edu>
2025-08-25 at 15:00:30
Subject: Rice University Update!!!
To: undisclosed-recipients

2025/08/25 - 13:30:40 (UTC -05:00)

Rice University Update!!!

This phishing email attempts to trick the recipient into providing their password through a fake verification link by threatening that their school email account will be permanently deleted.

From: <ej31@rice[.]edu kbs8@rice[.]edu>
2025/08/25 - 13:30:40 (UTC -05:00)
Subject: Rice University Update!!!
To: undisclosed-recipients

2025/08/22 - 13:29:54 (UTC -05:00)

Musical Instruments & More – Complimentary Items During Downsizing | +1 (231) 434-2196 Musical Instruments & More – Complimentary Items During Downsizing | +1 205 897 9426

The attacker claimed to send free musical instruments and asked recipients to contact a phone number provided in the subject line.

From: <dg111@rice[.]edu>
2025/08/22 - 13:29:54 (UTC -05:00)
Subject: Musical Instruments & More – Complimentary Items During Downsizing | +1 (231) 434-2196 Musical Instruments & More – Complimentary Items During Downsizing | +1 205 897 9426
To: undisclosed-recipients

2025/08/21 - 15:07:00 (UTC -05:00)

Downsizing Giveaway - Musical lnstruments and Other vaIuable ltems Contact +1 231 434 2196

The attacker claimed to send free musical instruments and asked recipients to contact a phone number provided in the subject line.

From: <wf22@rice[.]edu>
2025/08/21 - 15:07:00 (UTC -05:00)
Subject: Downsizing Giveaway - Musical lnstruments and Other vaIuable ltems Contact +1 231 434 2196
To: undisclosed-recipients

2025/08/18 - 10:23:15 (UTC -05:00)

TRS Pension Review

Impersonating retirement financial experts to trick users into making appointments and chatting with them, which may lead to potential losses

From: <sterling.nationalfinancial0@gmail[.]com haydenscottsterling313@gmail[.]com nationalfinancial534@gmail[.]com sterlinghsfinancial65@gmail[.]com haydenscott1316@gmail[.]com>
2025/08/18 - 10:23:15 (UTC -05:00)
Subject: TRS Pension Review
To: undisclosed-recipients

2025/08/17 - 16:41:24 (UTC -05:00)

[ USAA REQ5851884 ] Account Re-enabled with Notification (Email verification) USAA Detected Suspicious Activity Inbox Account Denied: Reactivate Your USAA Login Access

This phishing email impersonates USAA Bank, using a fake request reference number and urging the recipient to "reactivate access" in order to steal login credentials.

From: <Kasey.Chesnutt@rice[.]edu>
2025/08/17 - 16:41:24 (UTC -05:00)
Subject: [ USAA REQ5851884 ] Account Re-enabled with Notification (Email verification) USAA Detected Suspicious Activity Inbox Account Denied: Reactivate Your USAA Login Access
To: undisclosed-recipients


Other Scams

If you receive any other kind of scamming or phishing message, please report it to phishing@rice.edu.