ITS Phish Bowl Resource

UCLA ITS keeps a running list of phishing relating to the impersonation of UCLA websites, such as UCLA Logon and UCLA job postings that aim to gain access to personal information. 

" These emails, collectively called "phishing emails," or "phishing scams," are designed to trick campus users into providing their passwords and other identifying information to attackers.  They can also be designed to extort money or trick users into navigating to fake login pages, which can sometimes mimic the look of well-known logon screens, like the UCLA Logon page.

If you find the suspicious email you received already recorded in the phish bowl, please mark the email as spam, and you're done. If it's not noted in the phish bowl, please mark it as phishing (instructions below) and forward it to Information Security Team. It will be added so others are aware of it.

If you have responded to a suspicious email and/or clicked on a link and entered any account or personal information, please immediately contact the IT Support Center or your local departmental IT unit and reset your account password to prevent scammers from using your account. 

How to Report a Phishing Scam

The UCLA Information Security Office requests that campus users report phishing messages to our team so that we can proactively alert campus users and bring awareness to widespread phishing campaigns. In order for the Information Security Office to take action in response to a reported phishing message, please follow these steps:

1. Please follow instructions on How to Report a Phishing Scam
2. Send the resulting message and attachment to security@ucla.edu with a subject line identifying the message as a phishing report.

It is important to be aware of fraudulent phishing schemes. Check back here as we update the list below with known phishing attempts. "

(From: OCISO Phish Bowl)

This list is updated regularly, so check back if you are unsure of the legitimacy of an email you have received. If it not already on their list, you can report it help others avoid the scam. 

Here is an example of what it looks like: 

Clicking on the title will take you to the ITS article documenting the phishing with details about the message and what the next steps are if you mistakenly shared information or money.