Phish Bowl

Welcome

Welcome to the MRU Phish Bowl! Here you can find a copy of every phishing email that has arrived in a Mount Royal inbox and then been reported as suspicious or malicious. If you are not sure if an email is malicious or not, you can search this database to see if it has been previously reported.

How to use this site:

  1. Browse through the entire list of emails
  2. Browse through a category listed in the menu on the right
  3. Search for text found in the email using the search field

All links and attachments that appear in the emails are inactive. Please do not enter the URLs found in these emails into your browser’s address bar as some of these web pages contain malware that can be loaded onto your machine simply by visiting them. Each email entry is titled with its subject, the name of the email sender and the date the email was sent.

If you have any questions about the Phish Bowl or the emails it contains, contact Bernadette Pasteris the IT Security Training Analyst at bpasteris@mtroyal.ca.

Clue #3 solution = 48.7

Internal Audi Review – Crystal Scott 05/19/22

The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Contact Crystal using her MRU email address and ask if she sent the email.

 

 

Search terms – handle, request

Net – Frank Cotae 15/16/22

The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Send an email to Frank using his Mount Royal email address informing him of our payroll change procedures.

 

Search terms – employee portal, error, message, modify, direct deposit, pay, voided check, account, update

Re: – Myla Diaz 05/16/22

The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Report the email using the PhishAlarm button or forward the email to cybersecurity@mtroyal.ca.

 

 

Search terms – machine, observing, adult internet site, evidence, trojan, display, camera, social media, virus, recording, fingerprints, status, transfer, btc, foolish, digital wallet

report – “Francois Nadon” via app 05/04/22

The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Contact Frank and ask him if he sent the request.

 

Search terms – recent, vendor, invoices, aging, report, unpaid

Thank you for becoming a MasterClass customer – Quentin Sparks 04/28/22

The original message:

What gave it away:

If you aren’t sure if it is legitimate:

Report the email using the PhishAlarm button or forward the email to cybersecurity@mtroyal.ca.

 

 

Search terms – payment, invoice, attached phone number, customer service, order, customer care, subscription