Kansas State University




Reply to scam with .txt attachment

From: Dr Rebecca Crandall <pmicklean@gmail.com> Sent: Tuesday, November 12, 2019 9:07:09 PM
To: ****** ********* <*********@ksu.edu>; ****** ***** <********@ksu.edu>; ***** ******* <*******@ksu.edu>; ****** ****** <******@ksu.edu>; ******* ****** <******@ksu.edu>

Read more details in the attachment

Phishing Scam – 11/06/19 – Tutor needed

Reply-To Phishing Scam.

From: Trenton Warner <warntrenton@gmail.com>
Sent: Wednesday, November 6, 2019 9:51 PM
Subject: Tutor needed
How are you doing today? This is Trenton Warner. I saw your contact at the Kansas State University, Department of Psychology under Graduate Student’s portal. I seek for a basic school introductory psychology tutor for my Daughter. I would like to know if you will be available for the job.
The lessons could hold at the campus/library or your home, if you stays close to campus.
Looking forward reading from you.
Best regards,

Fwd: Information Desk

Reply-To Scam.
Sent to Microsoft and Google anti-phishing and notified email server host.

Email Body:

Get Outlook for iOS [https://aka.ms/o0ukef]
From: *********** <*********@ksu.edu>
Sent: Tuesday, November 5, 2019 7:19:42 PM
Subject: Information Desk
 In accordance with the work and study regulations of the Institution, we are pleased to inform you about an available part time position of a personal Assistant at three hundred and fifty dollars weekly wages. Please Note: This position is available on a first come, first serve basis. If your schedule is flexible enough to take this position, kindly contact “( maureen-brown@sapphirecapitalconsultant.com )” for exclusive details about this position. You should include your cellphone number when applying for direct contact as well as your preferred email address.

Be sure to read this message! Your personal data is threatened!

Email server host notified.

From: ******@ksu.edu [mailto:******@ksu.edu]
Date: November 5, 2019 1:56:20 PM CST
To: ******@ksu.edu [mailto:******@ksu.edu]
Subject: Be sure to read this message! Your personal data is threatened!
Reply-To: ******@ksu.edu [mailto:******@ksu.edu]

Hi, stranger!
I hacked your device, because I sent you this message from your account.
If you have already changed your password, my malware will be intercepts it every time.
You may not know me, and you are most likely wondering why you are receiving this email, right?
In fact, I posted a malicious program on adults (pornography) of some websites, and you know that you visited these websites to enjoy
(you know what I mean).
While you were watching video clips,
my trojan started working as a RDP (remote desktop) with a keylogger that gave me access to your screen as well as a webcam.
Immediately after this, my program gathered all your contacts from messenger, social networks, and also by e-mail.
What I’ve done?
I made a double screen video.
The first part shows the video you watched (you have good taste, yes … but strange for me and other normal people),
and the second part shows the recording of your webcam.
What should you do?
Well, I think $559 (USD dollars) is a fair price for our little secret.
You will make a bitcoin payment (if you don’t know, look for “how to buy bitcoins” on Google).
BTC Address: 19P1EZqopzMAb3UhdBoBtBJFBkAiVz8U7
(This is CASE sensitive, please copy and paste it)
You have 2 days (48 hours) to pay. (I have a special code, and at the moment I know that you have read this email).
If I don’t get bitcoins, I will send your video to all your contacts, including family members, colleagues, etc.
However, if I am paid, I will immediately destroy the video, and my trojan will be destruct someself.
If you want to get proof, answer “Yes!” and resend this letter to youself.
And I will definitely send your video to your any 19 contacts.
This is a non-negotiable offer, so please do not waste my personal and other people’s time by replying to this email.