Kansas State University

search

Scams

Month: January 2014

Phishing Scam – 1/30/14 – WEBMAIL UPDATE

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: “Aurora G. Nugent” <anugent13@AUSTINCOLLEGE.EDU>
Subject: [WEBMASTER] WEBMAIL UPDATE
Date: January 30, 2014 11:07:24 AM CST

The Help-desk is upgrading and maintaining database Server from the old Microsoft Server( No420134x ) to the new Microsoft Server( No520193x ) CLICK<http://mantia.moy.su/Exchange.htm>HERE and fill the information required.
Thank You
System Admin

Phishing Scam – 1/30/14 – RE: E-mail Alert!!!

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has not been submitted to Trend.

From: Sarri, Samuel <samuel.sarri@csn.edu>
Sent: Thursday, January 30, 2014 1:03 PM
To: Sarri, Samuel
Subject: RE: E-mail Alert!!!

This is an automatic message sent by our security system to let you know that you have 48 hours to confirm your account information. Once you have updated your account records, your account will be automatically upgraded. This will help protect your account in the future. This process does not take more than 3 minutes.To proceed to confirm your account details please click on the link HERE http://b5.caspio.com/ and follow the instructions. We apologize for any inconvenience caused.

Your sincerely,
WEB MAIL Security Department
© 2014 WEBmail All rights reserved

Phishing Scam – 1/27/14 – Message From Kansas State Employee Service Center

Origin ISP and web host have been notified. URL is active and blocked at the border. URL is being blocked by Trend.

From: Marlon Maron <mmaron@salk.edu>
Subject: DEAR STAFF OF Kansas State University ; COMPULSORY EMAIL FOR ALL STAFF!!!
Date: Mon, 27 Jan 2014 23:16:41

Dear Staff of Kansas State University,

Our Message Center needs to be re-set because of the high amount of Spam mails we receive daily and we are upgrading our email service.

We have re-set our server to serve you better and consistently;
please click the link below to re-set your mailbox to the new server:

http://www.turkuaztermal.com/authemail.php

Kindly click above or copy our reset link above your browser and open as soon as possible.

Failure to re-set your mailbox will render your staff e-mail in-active and deleted from our database.

Marlon Maron,
Email Administrator,
Kansas State University

Phishing Scam – 1/28/14 –Email Account Update

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

Date: Tue, 28 Jan 2014 07:08:57 -0800
From: Admin <austin_brunero@my.uri.edu>
Sent: Tuesday, January 28, 2014 9:08 AM
Subject: Email Account Update

Dear E-mail User,

We hereby announce to you that your email account has exceeded its storage limit. You will be unable to send and receive mails and your email account will be deleted from our server. To avoid this problem,you are advised to verify your email account click below link

http://pumerawebs.mypressonline.com/upgrade.php

Regards,
© Kansas State University January 23, 2014

Phishing Scam – 1/27/14 –Web-mail Administrator

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Web mail Team <workbox45@tybitmail.com>
Sent: Monday, January 27, 2014 4:47 PM
Subject: web-mail administrator

OUR WEB MAIL TEAM
Attention:

This is your web-mail administrator. Please, be informed that our email server has just been upgraded and your email needs to be upgraded immediately.This process is to keep the company’s email server updated and protected as always. Kindly click on the link below and follow the instruction to upgrade your account http://email-upgrade6.webnode.com/

Regards,
Admin.
webmail

Phishing Scam – 1/27/14 – Webmail Upgrade Report

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: HELPDESK <fzhou42@math.gatech.edu>
Subject: Webmail Upgrade Report
Date: Mon, 27 Jan 2014 03:37:39 -0500

Attention Email User,

THIS IS IMPORTANT UPGRADE FOR ALL STAFF

Start of Year System Update!:455***** : Web-mail Security Our F-Secure R-HTK4S new version anti-spam/anti-virus/anti-spyware 2013.Our web-mail Team will update your account. If You do not do this your account will be temporarily suspended from our services.

CONFIRM YOUR ACCOUNT , FILL ALL REQUIRED INFORMATION ON UPGRADE LINK PROVIDED BELOW;

>>>>>>>http://www.construccionurquiza.com.ar/templates/jf_architec-design/upgrade.php

Thank you for your cooperation!

Regards,
Bonnie Schnabel
WEB MAIL ADMINISTRATOR

Phishing Scam – 1/25/14 – Update

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

Second scam:
From: K-state.edu Email Update [mailto:mctorres1@uc.cl]
Sent: Saturday, January 25, 2014 6:25 PM
Subject: Update

First scam:
From: Email Update <dmacuna@uc.cl>
Sent: Saturday, January 25, 2014 6:13 PM
Subject: Update

An attempt was made to access your k-state.edu email account from a new computer.

For safety of your account or to avoid freezing of your email account, you need to update your account by clicking on this link: http://k-stateeduemailupdate.yolasite.com/

Phishing Scam – 1/25/14 – DEAR STAFF OF Kansas State University ; COMPULSORY EMAIL FOR ALL STAFF!!!

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: Marlon Maron <mmaron@salk.edu>
Subject: DEAR STAFF OF Kansas State University ; COMPULSORY EMAIL FOR ALL STAFF!!!
Date: Mon, 27 Jan 2014 14:02:06 +0000

Dear Staff of Kansas State University,

Our Message Center needs to be re-set because of the high amount of Spam mails we receive daily and we are upgrading our email service.

We have re-set our server to serve you better and consistently;
please click the link below to re-set your mailbox to the new server:

http://migrateresetcent.uhostfull.com/

Kindly click above or copy our reset link above your browser and open as soon as possible.

Failure to re-set your mailbox will render your staff e-mail in-active and deleted from our database.

Marlon Maron,
Email Administrator,
Kansas State University

Phishing Scam – 1/25/14 – New mail

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: noreply@ksu.edu [mailto:parvua@tcd.ie]
Sent: Saturday, January 25, 2014 12:52 PM
Subject: New mail

You have a message click on the link http://ksu-edu.webs.com/ to read

Phishing Scam – 1/25/14 – Update

Both Origin ISPs have been notified. Both URLs are active and blocked at the border. Both URLs have been submitted to Trend.

From: Email Update <fzpalma@uc.cl>
Date: Saturday, January 25, 2014 at 2:55 AM
Subject: Update

An attempt was made to access your email account from a new computer.

For safety of your Email account or to avoid freezing of your email account, you need to update your account by clicking on this link: http://emailupdatesecurity.yolasite.com/