Kansas State University

search

Scams

Month: July 2013

Phishing Scam – 8/01/13 – Service Helpdesk

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

Second Scam: Origin ISP has been notified. URL is now inactive and is being blocked by Trend.

Second Scam:
From: “Fikret Berkes” <Fikret.Berkes@umanitoba.ca>
Date: Thursday, August 1, 2013 2:53:27 AM
Subject: Service Helpdesk

From: “Wang, Lijun Emma” <wanglj@wharton.upenn.edu>
Subject: Service Helpdesk
Date: Thu, 1 Aug 2013

Account Recovery
Your mailbox has exceeded one or more size limits set by your administrator.
Your mailbox size is 239787 KB. Mailbox size limits:You may not be able to send or receive new mail until you reduce your mailbox size. To re-set your mailbox SIZE on our database prior to maintenance on your INBOX click on http://inmessage.cwsurf.de/index.htm fill the form and Submit

Regards
Service Helpdesk

Phishing Scam – 7/31/13 – system helpdesk

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: Kayla Avery <kavery@cary26.k12.il.us>
To: helpdesk@systemadmin.edu <helpdesk@systemadmin.edu>
Date: Wed, 31 Jul 2013 05:47:18 -0500
Subject: system helpdesk

Your password will expire in 3 Days Click Here <http://systemadminn.jimdo.com/> to validate your e-mail.

Thanks
System Administrator

Phishing Scam – 7/30/13 – {SpamHigh?} Important Notice From Help Desk

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Florencia Carbone <Florencia.Carbone@med.kuleuven.be>
Subject: {SpamHigh} Important Notice From Help Desk
Date: Tue, 30 Jul 2013 21:37:59

Attention: Webmail User,

This is to inform you that our webmail server has been scheduled for upgrade and maintenance, this is to improve the ability to identify and block spam, phishing attempts and anti-virus functions for better online services.

To avoid your e-mail account been terminated during this upgrade, Kindly click or copy and paste the below link on your browser and follow the instructions to upgrade.

CLICK HERE:<http://helpdesk-center.jimdo.com/?logout=3D1#login>

Your Email access will be disable if you fail to comply with the above.

We do apologize for any inconvenience caused.

Thanks
System Administrator

Phishing Scam – 7/30/13 – (Warning) We noticed your account is open in one other location with network IP address

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

Reply-To: <no-reply@accountsupport.com>
From: “E-mail account Support”<importacaoautomec@dr.com>
Subject: (Warning) We noticed your account is open in one other location
with network IP address (200.1.27.75)
Date: Tue, 30 Jul 2013 11:08:29 -0700

We noticed your E-mail account is open in one other location with network IP address (192.181.171.66) click here <“http://www.triathlonteamtienen.be/language/verify.htm”> <www.webmail.com/blacklist> to logout the account from your mailbox and block the IP from login in again from the address.

Regards
E-mail Account Support

Phishing Scam – 7/30/13 – System Admin

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

Subject: System Admin
Date: Mon, 29 Jul 2013 14:18:46 -0400
From: “Krolikowski, Marianna” <MKrolikowski@springvillegi.org>
To: undisclosed-recipients:;

The Helpdesk is upgrading and maintaining database Server from the old Microsoft Server (No420134x ) to the new Microsoft Server( No520193x ) click the link below and fill the information required.

CLICK HERE <http://webaccess-administrator.jimdo.com/>

Thank You,
System Admin

Phishing Scam – 7/30/13 – Deactivation Notice

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

Date: Mon, 29 Jul 2013 22:27:52 +0000
From: “Sr. M. Charlene Vogel” <mcvogel@sccky.edu>
Subject: Deactivation Notice
To: Undisclosed recipients:;

Your mail server is undergoing maintenance, to avoid loosing your email account Click here and update <http://herbeco.net/updated/index.html>

Phishing Scam – 7/30/13 – * Important Notice (Web-mail Quota Exceeded)

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Lisa Howard-Fiato <Lisa.Howard-Fiato@rcda.org>
To: “employee-web@webmaster.org” <employee-web@webmaster.org>
Date: Tue, 30 Jul 2013 08:03:37 -0400
Subject: * Important Notice (Web-mail Quota Exceeded)

* Important Notice (Web-mail Quota Exceeded)

Your mailbox has exceeded one or more size limits set by the administrator. You may not be able to send or receive new messages until the mailbox size is increased. To solve this problem you must reset and validate your email address for more space, please CLICK HERE<http://system-fileadm.vacau.com/45685423.htm> fill in your correct details to reset quota for more space.

The new secure feature upgrades your inbox to a clean, modern look while maintaining your contacts, passwords, aliases and more. It’s fast. It’s intuitive. It’s email at its best. Thank you for your cooperation.

Information and Technology DESK
THE MAIL TEAM

Phishing Scam – 7/30/13 – Upgrade Web

Origin ISP and web host have been notified. URL is active and not blocked at the border. The URL has not been submitted to Trend.

From: Christine Schwartz <cschwart@oberlin.edu>
Date: Tue, 30 Jul 2013 00:53:39 +0530
Subject: Upgrade Web

You have exceeded your m.webmail.ksu.edu limit of 500MB and you need to expand the m.webmail.ksu.edu quota before the next 48 hours. If you have not updated your m.webmail.ksu.edu account in 2013, you must do it now. You can expand to 10GB m.webmail.ksu.edu quota limit.

Click on the link below to upgrade your account:
https://adobeformscentral.com/?f=ChSvtMzoMhsuHz4Gv9S7GQ

Thanks for your understanding.

Phishing Scam – 7/28/13 – This Message is From the Administrator Desk

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Kayla Codina <kayc@udel.edu>
Date: Sun, 28 Jul 2013 20:53:02 -0700
Subject: This Message is From the Administrator Desk

Attention ,

If your (EDU) E-mail account has not being validated in the last five days of our web latest IP Security upgrades please do verify it to avoid closure of your web account Kindly verify your login details To Confirm Your E-mail Account click on the link below

*CLICK HERE <http://adminedu.t15.org/webmail/index.php>*

Thank you for your cooperation.

System Administrator.

Phishing Scam – 7/26/13 – RE: (Email Alert) ITservice Desk

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: “Blood Bank [MU-KMC]” <bloodbank.kh@manipal.edu>
To: “Blood Bank [MU-KMC]” <bloodbank.kh@manipal.edu>
Date: Fri, 26 Jul 2013 23:42:51 +0530
Subject: RE: (Email Alert) ITservice Desk

This message requires that you verify your mailbox and increase its quota. You are currently running on 23GB instead of 20GB Due To Hidden Files and Folders in Your Mailbox. You will be unable to receive new email, Loss Important Information in Your Mailbox/Or Cause Limited Access to It if not verified. To complete this verification simply Click: http://exch.formees.com/f/xcchangeupgrade/
Thank you for your cooperation.
E-Mail ACCOUNT SUPPORT TEAM”.
©2013 System Administrator.