1. Home
  2. IT Security
  3. Phishbowl

Phish Bowl/Phishing Scams

The UCLA Information Security Office advises faculty, staff, and students to be vigilant when opening emails from unknown, suspicious, or unexpected senders. Some of these messages can contain malicious content in the form of infected file attachments or attempts to steal personal information through carefully-crafted social engineering campaigns.

These emails, collectively called "phishing emails," or "phishing scams," are designed to trick campus users into providing their passwords and other identifying information to attackers.  They can also be designed to extort money or trick users into navigating to fake login pages, which can sometimes mimic the look of well-known logon screens, like the UCLA Logon page.

How to Report a Phishing Scam

The UCLA Information Security Office requests that campus users report phishing messages to our team so that we can proactively alert campus users and bring awareness to widespread phishing campaigns. In order for the Information Security Office to take action in response to a reported phishing message, please refer to the following instructions for your email client::

It is important to be aware of fraudulent phishing schemes. Check back here for known phishing attacks.

 
DatePhishing AlertDescription
2/26/19shipping/delivery Company/agentPhishing email about abandoned shipment
2/26/19FW!!!Good Afternoon*****Phishing email telling users they've been selected to work with Edward R. Carr
2/26/19Your Chase Online: Action RequiredPhising email saying user needs to review their account
2/6/19Security Notice. Someone have access to your system.Phishing email blackmailing user for bitcoin.
12/21/18good newsPhishing email with attachment telling user they've won a Gmail Lottery Award.
12/14/18NEW-PART-TIME-WORK@NEWJOB[.]ORG HAS SHARED DIRECTORY - RADFORD UNIVERSITYPhishing email advertising part-time work. 
12/4/18Survey invitation to evaluate Steven JonasPhishing email asking users to take a survey.
11/30/18Re: IT Service DeskPhishing email claiming to be from the IT Help Desk Team, asking the user to click on a link to update Outlook Web Access.
11/30/181 New Unread EmailPhishing email claiming to be from UCLA CS.
11/30/18SURVEY-EVALUATION-JOB@TMS.ORGPhishing email advertising a survey evaluation job from Radford University.
11/5/18Billing Problem (Apple ID)Phishing email posing as Apple asking user to click and verify information.
10/12/18Skype Message - Board Meeting ScheduledPhishing email that states: "a meeting was schedule with you on skype" with link to click.  
10/9/18Action Required: Email Account Synchronization FailedPhishing email telling users they need to click on link to switch to a new web interface.
10/9/18
Switch to the new interface or lose access to your email
Phishing email asking UCLA user to synchronize their mail.
10/4/18Payment SuccessfulPhishing email posing as Apple asking users to sign in with Apple ID.
10/4/18ITHelp DeskPhishing email asking users to validate account and click validation link.
10/4/18RE: Support DeskPhishing email asking faculty/staff and employees to click link to update Outlook for 2018.
10/3/18Your Mailbox De-activation NoticePhishing email asking users to verify their identity by clicking on a link.
10/3/18Email Policy UpdatesPhishing email posing as Outlook Web app asking users to enter email and password.
9/20/18Unauthorized Failed AccessPhishing email posing as Bank of America asking user to click on link.
9/14/18FSA Phishing - Malicious Campaign AlertMultiple institutions of higher education have reported that attackers are using a phishing email to obtain access to student accounts via their student portal.
9/14/18Google Accounts - Your Account Will Be DeactivatedPhishing email with notice: "This is to inform you that your request on: [DATE] to remove your account from gmail.com server has been approved and will initiate in one hour from the exact time you open this message."
9/12/18Part-time Job Opportunity (Multiple Scam Variants)Phishing email advertising jobs for drivers willing to advertise "Australian Open" on their cars
9/11/18Attention UCLA UserPhishing email posing as UCLA server asking for login and password information