Phish Bowl

We have been alerted that the bad-actors are trying to contact our campus users via text message. LITS will never use text messages to communicate regarding your MHC account, or any other support need.  

We have been alerted that the bad-actors are trying to contact our campus users via text message. LITS will never use text messages to communicate regarding your MHC account, or any other support need.  

Subject: Mount Holyoke College, Email/Portal Account Deactivation Notice

From: maza224k at mtholyoke dot edu

Subject: Your 2025 Staff Assessment Report 
From: khaygarth at riversideunified dot org

From: NOIR BENZ (noirbenz80[@]gmail[.]com), jerry doll (jerrydoll775[@]gmail[.]com), Gideon (gideon112jude[@]gmail[.]com), and others via Google Drive

From: Heidi Cowperthwaite <HCowperthwaite[@]cvsd[.]org>

From: ruesshannah01158[@]hotmail[.]com

From: blaise at bqredovisning dot se

From: "Joy Jumagdao" <ar[@]invsdebt-linkedin[.]com>

Learn how to protect yourself if you receive an unexpected letter or email in regards to a debit and/or credit card. Here's how the scam starts: A scammer will open a debit card in your name using real or verified banks to scam you out of money. 

Watch out for scam texts!

From: Alex Wirth-Cauchon <dsiemion[@]optonline[.]net>

From: Diana Larouche <dlarouche[@]viability[.]org>

From: Cyntia Marcela Prieto <cyntia.prieto[@]minseg[.]gob[.]ar>

From: Marlene R Ramirez <alert[@]zidakreditng[.]com>

From: Sean Canfield <canfieldseeen[@]yahoo[.]com>

From: A variety of domains 

From: H-R Dpt <Markus[@]inscyd[.]com>

From: Donna Rowe <jasonx23[@]ntlworld[.]com>

From: VM <contact[@]global-law[.]gr[.]jp>

From: TPERA-SMB-Reservation <hyattregencytaoyuan.reservation[@]hyatt[.]com>

From: AR ZoomInfo Technologies LLC <chirag at gulftalent dot com>

From: Roberta Cordano <barokahrauf[@]gmail[.]com>

From: Zhang, Nijun (hau2ah) <hau2ah[@]virginia[.]edu>

From: "Karla Youngblood"  via <erinthomasy[@]gmail[.]com>, <erinthom696[@]gmail[.]com>, or <erine5708[@]gmail[.]com>

From: Hannah Runte <Hannah.Runte[@]ops[.]org>

From: Jamie Peterson 
<jpeterson[@]retirementstrategyconsultants[.]org>

From: Human Resources <gyfhstsydjivig[@]gmail[.]com>

From: Miriam-Luzie Schomber <pddnshhamsjshh[@]gmail[.]com>, and other strange personal gmail addresses

From: Sugarplim Cutydot <pametajaru964[@]gmail[.]com>

From: "Cricket Morris <Bordcommitee[@]accountant[.]com>"

From: N/A

From: "Professor. Michael Robinson <projectresearch834[@]gmail[.]com>"

From: "inforeco[@]recovportal[.]com"

Learn to recognize a common type of phishing scam that frequently targets MHC students. Here’s how the scam starts: A scammer impersonates an MHC faculty member and invites students to participate in a vaguely-described flexible paid research opportunity with the professor. 

From: professor Katherine Schmeiser Lande <kschmeis[.]mtholyoke[.]edu[@]gmail[.]com>

From: "Professor Michael Robinson" <publichealthresearch001[@]gmail[.]com>

Subject: Re: Report 
From: Kinuyo Kanamaru <kinuyo.at.umass dot edu>

Subject: faculty and staff
From: April Dinsmore <adinsmore at sscaparkslope dot org>

Subject:Items Rehoming
From:Amanda Dumais <adumais at mtholyoke dot edu>

From: ball school <ballschool147[@]gmail[.]com>

From: Danielle R. Holley <mosesalesh2[@]gmail[.]com>

From: Roger Gill <rgill[@]maritime[.]edu>

From: professor Katherine Schmeiser Lande <kschmeis[.]mtholyoke[.]edu[@]gmail[.]com>

From: Janet Hoffman <janet[@]umccollects[.]com>

From: Gary Gillis (via Google Drive)  <rose99327[@]gmail[.]com>

Subject: Danielle R. Holley shared a file with you.

From: Martin, John G. <jgmartin[@]halifax[.]k12[.]va[.]us>

From: J. Jackson <jestellj[@]gmail[.]com>

Subject: Your order placed successfully. For more info Call at I (xxx) xxx-4xxx. Mac Store updated your invoice ( 1989 )

From: Your order placed successfully. For more info Call at I(xxx) xxx-4xxx. Mac Store <servicio atpaypal dot es>

From: Daphne TaylorMXSRMVX <deprt[@]hotmail[.]com>

From: "Bruce Gilbert <mewst2190[@]gmail[.]com>

From: Sanford Wurmfeld <sanfordwurmfeld[@]gmail[.]com>

From: Marcia Brumit Kropf <ritamac694[@]gmail[.]com>

From: Veronica Leal <veronica dot leal at austinisd dot org>

From: Anail Beaton <anail.beaton at austinisd dot org> or Jenny Daughtry <jennifer.daughtry at austinisd dot org>

From: Margory Benavente Morales <mbenaventem[@]fwps[.]org>

From: TRICIA Y. PAIK <everythingleave73 at gmail dot com>

From: Aby Savi <asavi at fwps dot org> or Bonnie Stone <bonnie.stone at austinisd dot org>

From: Ben, Antonio, or Anthony at a variety of domains

From: '[Name]' via Class-1969 <class1969-g@mtholyoke.edu> 

From: Christopher Dunn <christopherdunn23[@]yahoo[.]com> and <cabot180[@]gmail[.]com>
 

From: WеIIsFаrgо@ОnIinе | User ID Blocked (via Google Drive)

Reply to: various emails ending in [@]incidentmanagement[.]protectshield[.]help

From: "Doragh, Abigail" <adoragh at fgcu dot edu>

Job scams may target students via SMS text message. Review an example of one of these malicious messages that MHC's information security partners shared with LITS.

From: Michelle Markley <plxxhhdrrdt at icloud dot com>
 

From: Via -Docus_ign <dchamber at nifty dot com>

From: Jumi Bello <jumoke.adeola.bello at gmail dot com>
 

From: Professor Bruce M. Arnold <interdisciplinaryresearch7 at gmail dot com> and Professor Laurie Tupper <interdisciplinaryresearch5 at gmail dot com>

From: Scammers via Paypal <service@paypal.com>

Subject: An Opportunity To Earn Weekly Student's Wages

From: Professor Bruce M. Arnold <publichealthresearch005 at gmail dot com>

From:  Alexander <railalaine516 at gmail.com>

From: Tatsuhiko Shirai <yahtsysjdkdk at gmail dot com>

From: Accounts Payable <accountspayable at fergflor dot org>
 

From: Rodney Blake <pedrolance1809 at gmail dot com>

From: 'Miller, Tanna' <Tanna.Miller at usd305 dot com> or <tbelknap at moore dot edu>

Subject: Major Gift

From: Luke Jaeger <adamek1965 at optonline dot net>

From: Nester, Laura <laura dot nester at patrick dot k12 dot va dot us>

From: Deann Brown <deann dot brown at austinisd dot org>

Subject: Item shared with you: "Wаrning! Yоur Ассоunt Вlockеd Duе to Unrесоgnized Асtivity - Makе Sесurity Stеps Now"

From: Wеlls Fαrgοٜ Ᏼаnk ᎒ Lо... (via Google Drive) <drive-shares-noreply at google dot com>

From: DESK. ADMIN <tariq underscore saeed89 at hotmail dot com>

From: Debra Durand <debra dot durand at austinisd dot org>

Subject: Progressive Update [UCSC] or Circular Intern [ UCSC ]

From: bennetthu08 at gmail dot com

Subject: RA-NEEDED!!!

From: Marc Katz <MKatz28@briarcliffny.org

From: Technology Help Desk <helpdesk at mtholyoke dot edu>

From: Laura Peteros <lpeteros at mtholyoke dot edu>

From: Beth Choquette <bchoquette at richmondconsolidated dot org>

From: icarpio at mtholyoke dot edu

Subject: Mtholyoke is ready for your review

From: Mtholyoke Portal Server <username at nifty dot com>

From: Phillip Wildermuth <wildermp at stjohns dot edu>

From: Michael Minyard <mminyard at umass dot edu>
 

From: Co-Pilot <portal at teamsserver dot onmicrosoft dot com>

From: "Welch, Eileen" <ewelch at fgsd dot k12 dot or dot us>

From: Hamilton, Lusaka <lou.hamilton at shawu dot edu>

From: "Help Desk" <helpdesk at mtholyoke dot edu>

From: "Lisa Balicki" <jagsvhsvy at gmail dot com>

From: Post, Sarah <spost at psusd dot us> 

From: s dot hayes at pinelevel dot org

From: Barbara F. Rivers <efcasgsuugc at gmail dot com>
 

From generic @gmail.com addresses

From: Creatio support <support at creatio dot com>

From: Colleen O'Connor-Rickey <mcdonald8997 at gmail dot com>

From: Ana Teran Bedolla <ateranbedolla at psusd dot us>

From: mtholyoke.edu HR <support at aidanodesign dot net>

From: Shelley Allison <sallison at dsdmail dot net>

From: Ahmet Ziyaettin Karaçam <ahmet dot karacam at acibadem dot com>

From: Blanchette, Brendan (bblanchette at psusd dot us) <bblanchette at psusd dot us>

From: Hernandez Sotelo Edgar Jonatan <EHSOTELO at uninet dot com dot mx>

From: Frances & Patrick Connolly <darka dot bozanic at dz dash sdz dot hr>

From: Yasser Hassanein <yasser.hassanein at samnan dot com dot sa>

From: Bono, William <bono dot w at gmercyu dot edu>

From: Sundiata Ervin <117962 at enidk12 dot org>

From: Andrea Ricketts-Preston <nbello at pleasantonusd dot net> or Danielle Holley <nbello at pleasantonusd dot net>

From: Alex Wirth-Cauchon <dianeweiss at optonline dot net>

Subject: Unique Opportunity: Acquire a High-Quality Piano

Subject: Thank you, for Payment confirmation for invoice 0S0HBO3RLR4YL3E

From: URS_Transaction_Detail 79254181 <wwat72803 at gmail dot com>

Subject: New Message from Mount Holyoke

From: Mount Holyoke College <arun at latech dot edu>

Subject: Subscription Update: Your Regular Fee Has Been Successfully Accepted

From: Sixta Reidherd <sixtareidherdpeee at gmail dot com>

Subject: Invoice#INV10081092 - Geek^Squad(R) +1 813 776 1410

From: nrt5 <nrt5 at ochiailhve dot onmicrosoft dot com>

Subject: Action Must Be Taken Immediately: Subscription Payment Confirmation: Check Your Account For Any Recent Debit Activity To Safeguard It!

From: Sha Kruszewski <shakruszewskisoog at gmail dot com>

Subject: Hi

From: Lisa Sullivan <lsulivan dot mtholyoke dot edu at gmail dot com>

Subject: Just Checking...... Eugenia Herbert

From: Eugenia Herbert <eugenia.herbert at comcast dot net>

Reply to: eugenia.herbert at outlook dot com

Subject: Checking in

From: Anne Benedict <abene at comcast dot net>

Sent from: 305-205-0603

Subject: Can You Work As A Remote Research Partner?

From: Professor James Hartley <jhartley at mtholyoke dot edu>

Subject: Donation Of A Welding Equipment And Toolbox

From: Bett Schumacher <Mountholyoke at infostudiesedu dot com>

Subject: Presentation shared with you: "Transparent Communication: Keeping You Informed During Online ID Block _1155297733.pptx"

From: Wеllsfаrgо Ваnk Validation (slurvipoli1997 at aceessrelooadcheck dot checktskline dot eu) via <drive-shares-dm-noreply at google dot com>

Subject: You Google Account password has been reset

From: Google <google at noticenter dot org>

Subject: Please confirm your recent purchase

From: fraudalert at fast-pay dot co <fraudalert at email-records dot com>

Subject: Authentication required

From: Microsoft Outlook <noreply at securessoft dot com>

Subject: Attention Mount Holyoke College

From: Marcella Runell <lewistiffanyga at gmail dot com>

Subject: INTERN RESEARCH POSITION

From: MOUNT HOLYOKE COLLEGE <rkirsch1 at optimum dot net>

Subject: Danielle R. Holley Shared a Document

From: John Marshall <eghosheh at csu dot edu>

Subject: Abstract Submission for Mental Health Conference 2024 | Paris, France

From: Program Manager <nyracrystal89 at gmail dot com>

Subject: Fake text appearing to come from President Danielle Holley

From: (716) xxx - xxxx

Subject: [researchservices-g] ASSESSMENT REVIEW REPORTS FOR EMPLOYEE 2024

From: 'Jennifer Moreno' via Researchservices <researchservices-g at mtholyoke dot edu>

Subject: John Wilkes shared "2024 EMPLOYEE POSITION UPDATE" with you

From: John Wilkes <john.wilkes at austinisd dot org>

Subject: Research Assistant

From: student at school-employment-edu dot com

Subject: Re: Can You Work As A Remote Research Partner?

From: <publichealthresearch0 at gmail dot com>

Subject: email change reminder

From: Carolina Cardenas <Carolina.Cardenas at sweetwaterschools dot org>

Subject: Notification from the Massachusetts Department of Unemployment Assistance (DUA) sent you a new message

From: <5883aa26-b9cc-453a-a86d-37eb30d5f9eb at ascend dot wix dot com>

Subject: STUDENT REMOTE RESEARCH ASSISTANT POSITION

From: MOUNT HOLYOKE COLLEGE <ordilley at optimum dot net>

Subject: SUMMER/FALL INTERNSHIP

From: Prof. Barbara S. Lerner <professor.edu19 at gmail dot com>

Subject: [events-calendar] Anti-Discrimination and Anti-Harassment Policy

From: Tricia Barrett <tbarrett at ccsdli dot org>

Subject: Flexible Part-Time Job

From: Jesaya Teddy Mauliate Panjaitan <jesaya.panjaitan at iconpln dot co dot id>

Subject: Account Deactivation

From: Ratih Fidiawati <ratih.fidiawati at iconpln dot co dot id>

Subject: Follow Up

From: "Mara Breen" <officeonline70705 at gmail dot com>

Subject: OPEN SLOTS!!!!!

From: a bassiere <a.bassiere at eglantine-creations dot com>

Subject: Document shared with you: "mtholyoke Teachers HR Update-Sept 29,2023.docx"

From: Joel Lagares (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: Important: Email update - Action required
"From": helpdesk@mtholyoke.edu

Subject: Document shared with you: "Notification.docx"
From: IT HelpDesk (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: Document shared with you: "Notice of faculty meeting for all departmental staff on Tuesday.docx"

From: Kathy Harris (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: **PAYCHECK FOR OFFICE SUPPLIES**

"From: Payroll Department <payrolld at mtholyoke dot edu>"

Subject: Document shared with you: " 2023 STAFFS SUMMER UPDATE REVIEW"

From: Maplewood Cafeteria (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: 2023 EMPLOYMENT EVALUATION

From: <covelrycoughlin at gmail dot com>

Subject: RESEARCH ASSISTANT POSITION

From: Mount Holyoke College <hiringboard at studentaffairs dot team>

Subject: REMOTE RESEARCH ASSISTANT

From: Julia Papesch <jlp14d at my dot fsu dot edu>

Subject: Pay Changes and Adjustment for Faculty and Academic staff

From: Jon Balden <jon.balden at oxnardunion dot org>

Subject: REMOTE INTERN ASSISTANT POSITION

From: <ynsmw1 at optonline dot net>

Subject: Attention Dear! Your SSN has been cancelled

From: SSA.SUPPORT TEAM-USA_fm629 <leonhint417e0 at gmail dot com>

Subject: Disposal of Yamaha Baby Grand Piano !!!

From: Penny Davis <safariparkgardens at gmail dot com>

Subject: Baby Grand Piano

From: Alex Wirth-Cauchon <joseph.ericksonlsc at gmail dot com>

Subject: OPPORTUNITY TO OWN A PIANO

From: Beverly Daniel Tatum <josephpow8 at gmail dot com>

Subject: Re: Faculty and Academic Staff Pay Adjustment

From: "Bodnar, Kerri" <kabodnar at wpsd dot k12 dot pa dot us>

Please be aware of a financial scam that recently occurred via Instagram. An account was impersonating a student organization on campus and has been direct messaging students to elicit money. This activity was determined to be fraudulent and immediately reported to Instagram. 

Subject: Document shared with you: "2023 PayRoll Evaluation.docx"

From: Lisa McConachie (via Google Docs) and Mary Emmett (via Google Docs)

Reply-to: jerickson @ scappoose . k12 . or . us and memmett @ fcrsd . org

Subject: FRANCES PERKINS CENTER

From: Jennifer Burns <jburns at francesperkinscenter dot org>

Subject: Danielle R. Holley as shared a doc with you for review.

From: "Danielle R. Holley" <mickeyradishjgo76 at gmail dot com>

Subject: "Exigent!"

From: Kijua Sanders-McMurtry <jeer at runbox dot com>

Subject: Document shared with you: "PAYROLL PAYMENT AND GRANT SCHEDULE FOR FACULTY&STAFF.docx"

From: Ashley Kennedy (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: Item shared with you: "SALARY INCREASE.pdf"

From: Tony Burr (via Google Docs) <drive-shares-dm-noreply at google dot com>

From: Diane Esterline (via Google Docs) <drive-shares-dm-noreply at google dot com>

Subject: Document shared with you "IT SECURITY ALERTs[REQUEST SYSTEM ACCESS]SIGN IN WITH YOUR WORK OR SCHOOL ACCOUNT TO VIEW FILE.."

From: Tony Burr (via Google Docs) <drive-shares-dm-noreply at google dot com>

Fewer clicks! Improved community vigilance against phishing!

From: Will Johnson (via Google Drive) <drive-shares-dm-noreply at google dot com

"From": support at mtholyoke.edu

From: isabel.oliveira at elba.com.br

From: drive-shares-dm-noreply at google.com

From: anitathomas7653 at gmail.com

Many MHC employees are being targeted by phishing emails claiming to be file shares from President Tatum.

Phishing activities continue to be a global problem, including messages targeting the MHC community. Don’t take the bait! Read on for important information and helpful resources to keep you safe.