Kansas State University

search

Scams

Month: December 2013

Phishing Scam – 12/28/13 – Illegal Sign-in Alert

Origin ISP has been notified. URL is inactive and blocked at the border. The URL is being blocked by Trend.

From: IT Help Desk <ppanagabko@cogeco.ca>
Subject: Illegal Sign-in Alert
Date: December 28, 2013 8:04:43 AM CST

IT Help Desk

Illegal Sign-in Alert

We noticed series of login attempts to your WebMail account from an unrecognized device today Sat, Dec 28, 2013 01:35 CEST from Pakistan. Was this you? If so, you need to pass IMSS Help Desk desk second sign-in verification thereof. However, if this wasn’t you, please follow the link below please sign in and verify your account information by clicking the link below:

http://supauth3.atwebpages.com/de-login.php

We shall continually notify you whenever there’s any security compromise on your account.
Thank you.

IT Help Desk

Information Management Systems and Services All Rights Reserved.

Phishing Scam – 12/26/13 – Re-Validate Your Email Account

Origin ISP and web host have been notified.  URL is active and blocked at the border.  The URL has been submitted to Trend.

From: “Mary A. Kroeger” <maryak@Princeton.EDU>
Date: Thu, 26 Dec 2013 11:08:16 +0000
Subject: Re-Validate Your Email Account

You have reached the quota limit of your mail box. You will not be able to send or receive mails, increases mailbox size, to send or receive new mails. Click Here http://ttgumi.hu/components/com_acymailing/upgrade/ to update your account

Regards,
Maintenance Team

Copyright ©2013, Maintenance Technical Support Team, All Rights Reserved.

Phishing Scam – 12/23/13 – UP GRADE YOUR EMAIL ACCOUNT BOX

Origin ISP and web host have been notified. URL is active and blocked at the border.The URL has been submitted to Trend.

Date: Mon, 23 Dec 2013 22:03:21 +0530
From: web Master Adminstrator. <info@webmaster.com>
To: undisclosed-recipients:;
Subject: UP GRADE YOUR EMAIL ACCOUNT BOX

Dear Subscriber,
We’ll shortly flick the switch and move you across to a new-look web-mail system, complete with a new interface and better performance. Please be aware that as your new web-mail is still being trialled, calendar and contact information entered in the old system is only temporary and will be lost when we switch off the old system. All of your calendars from the old system will be carried forward. login to below link to update your account now

http://twnbo.webs.com/

PLEASE NOTE: This is a compulsory measure. Failure to comply may lead to lost of your data
Thank you
Copyright © 2013 Web-mail Help-desk Support Center.

Phishing Scam – 12/21/13

Origin ISP has been notified. URL is inactive.

From: “Damion, Felicia” <felicia.damion@polk-fl.net>
Subject:
Date: Sat, 21 Dec 2013 08:36:17 +0000

Your mailbox has exceeded the storage limit which is 20GB as set by your administrator,you are currently running on 20.9GB,you may not be able to send or receive new mail until you re-validate your mailbox.To re-validate your mailbox please CLICK HERE https://docs.google.com/forms/d/1sAqOtp978tcdT9_e_7OhLtMMkC9Vn1YRMKVJrO9niGo/viewform

Thanks
System Administrator

Phishing Scam – 12/21/13 – Web-Mail/eku.edu

Origin ISP and web host have been notified. URL is active and blocked at the border.The URL has been submitted to Trend.

Subject: Web-Mail/eku.edu
To: Recipients
From: Web-eku.edu <webmail@support939.onmicrosoft.com>
Date: Sat, 21 Dec 2013 10:17:08 +0530

Dear Webmail Account User, This is to inform All Active Web Mail Account Owners/Users that We are currently doing Our Annual Account Upgrading. Your GB have exceeded the Annual storage Limit on your mailbox Set-Up by your WEB-MAIL SERVICE/ADMINISTRATOR per Annual.

From now henceforth 21st and 24hours 22nd Dec 2013, your Account will Suspended and De-Activated. Click the Link and Fill Out the Web-Mail/eku.edu Customer Care Form to Validate your Account : http://webmailteamsuportserviceses.webs.com/

Phishing Scam – 12/19/13 – Dear User

Origin ISP and web host have been notified. URL is active and blocked at the border.The URL has been submitted to Trend.

From: “Martinez, Jessica J” <jessica.martinez@saclink.csus.edu>
Subject: Dear User
Thread-Topic: Dear User
Date: Thu, 19 Dec 2013 10:45:14 +0000

We are having a system Re-activation of all Web-mail accounts due to some technical issues on our system Please Kindly CLICK HERE http://redsdk.webs.com/ to Re-activate your account. WARNING: Failure to Re-activate your account may lead to permanent email limitation

Phishing Scam – 12/18/13 – Mail Administrator

Origin ISP has been notified. Reply-to: address has been on APER list since (11/25/2012).

First Scam:
Date: Wed, 18 Dec 2013 18:30:01 -0300
From: Mail Service Center. <magomes@tce.ma.gov.br>
Reply-To: Mail Service Center. <webinfohelpdesk@mail2webmaster.com>
Subject: Mail Administrator
To: Undisclosed recipients:;

Second Scam:
Date: Thu, 19 Dec 2013 14:30:53 -1000
From: Mail Service Center. <saraswati.neupane@nrcs.org>
Reply-To: <webinfohelpdesk@mail2webmaster.com>
Subject: Mail Administrator
To: Recipients

Dear Account User,

This message is from the Office of the Information Technology Services (ITS) to all webmail account owners. Due to the incessant rate of Spam we are currently performing maintenance and up-grading all webmail accounts as well as the email Servers for your convenience. All email services will be interrupted during this period, To prevent your account from closing during this exercise you will have to update it below to know it’s status as a currently used account with a hard spam protector.

Has commence on December 1st to end December 30th 2013 beginning at 9:00 p.m. until approximately 12:00 midnight to enable us increase the storage size of your webmail account. Be informed also that we will not hesitate to delete your email account if not functioning to create more space for new users.

Confirm Your email account Details by clicking on the reply button and follow by your;

1 – User Name (Login ID):
2 – E-mail:
3 – Password:
4 – Phone:

NOTE: This information will help us also upgraded your account to our new F-Secure 2013-2014 version HTK4S anti-virus/anti-spam and password will be keys encrypted with 1024-bit RS for password security. Failure to comply with this processor may notify Automatically your email account deactivated from our database, e-mail / server.

After upgrading, a password reset link will be sent to your email for new password. Please understand that this is a security measure intended to help protect your email Account.

Contact the IT Help Desk
Walk in: 214 Hale Library
E-mail: webinfohelpdesk@mail2webmaster.com
Self-service: Submit an online request
Knowledge base: IT help documentation

Phishing Scam – 12/18/13 – Dear User

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: “Pollard, Ashley Rene” <ashleypollard@csus.edu>
Subject: Dear User
Date: Wed, 18 Dec 2013 13:19:38 +0000
To: Undisclosed recipients:;

We have upgraded to 4GB Email Space, Validate your email space. your account is still active to enable you send and receive email. CLICK HERE <http://kstdsk.webs.com/> for confirmation of details and upgrade. Note that failure to upgrade with this notification would result to termination of your user account.

Thank you for using our email.

Phishing Scam – 12/18/13 – Dear User

Origin ISP and web host have been notified. URL is active and blocked at the border.The URL has been submitted to Trend.

From: “Young III, James T” <YoungJT04@uww.edu>
Subject: Dear User
Date: Wed, 18 Dec 2013 13:55:52 +0000
To: Undisclosed recipients:;

Your mailbox has exceeded the limit of 200MB. You will be unable to send OR receive new emails,validate your mailbox to upgrade. To re-validate your mailbox, CLICK HERE<http://kstdsk.webs.com/> to upgrade your Account withing the next 24hours.

IT Support
Copyright =A9 2013 All Rights Reserved.

Phishing Scam – 12/17/13 – HelpDesk Warning Message

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Jan McPhedran-McLeod <jmcphedranmcleod@wlu.ca>
Subject: HelpDesk Warning Message
Date: Tue, 17 Dec 2013 15:58:30 -0500

Second address:
From: “Douglas J. McCready” <dmccready@wlu.ca>
Sent: Wednesday, December 18, 2013 3:28:00 AM
Subject: HelpDesk Warning Message

Third address:
From: “HelpDesk” <info@helpdiskunit.com>
Sent: Wednesday, December 18, 2013 3:22:05 AM
Subject: Warning Message!!!

Authorized users only

Your mailbox has exceeded its web-limit,you have incoming pending Mails you are advice to contact Helpdesk,To Resize your webmail with the link below
http://helpdeskunit.jimdo.com/

Note: All Data will be in place after reset including pending mails.

Copyright 2013 Webmail Communications Inc. All Rights Reserved.