Kansas State University

search

Scams

Month: June 2014

Phishing Scam – 06/18/2014 – Scheduled Maintenance & Upgrade

Origin and Reply-To: ISPs have been notified. Reply-to: address has been on APER list since 06/16/2014.

From: Help Desk <info@annieandfriends.com>
Subject: Scheduled Maintenance & Upgrade
Date: Thu, 19 Jun 2014 04:29:09 +0800
Reply-To: <help.desk014@tech-center.com>

Help Desk

Attention Account User,

Scheduled Maintenance & Upgrade

Your account is in the process of being upgraded to a newest
Windows-based servers and an enhanced online email interface inline with internet infrastructure Maintenance. The new servers will provide better anti-spam and anti-virus functions, along with IMAP Support for mobile devices to enhance your usage.

To ensure that your account is not disrupted but active during and after this upgrade, you are required to kindly confirm your account by stating the details below:

* Domain\user name:
* Password:

This will prompt the upgrade of your account.

Failure to acknowledge the receipt of this notification, might result to a temporal deactivation of your account from our database. Your account shall remain active upon your confirmation of your login details.

We do apologize for any inconvenience caused.

Sincerely,

Your Customer Care Team

Phishing Scam – 06/17/2014 –

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: Schiller, John [mailto:John.Schiller@plan-international.org]
Sent: Tuesday, June 17, 2014 3:51 PM
To: Schiller, John
Subject:

We want to upgrade all Outlook account scheduled for today as part of our duty to switch to unlimited data plan Outlook Web Apps 2014, Your email account would
be blocked from sending and receiving emails if your email Outlook account is not verified with in 48hr

You are advised to visit our verification portal Click HERE (http://mysite3400.dudaone.com/) and re-login to effect the change.
Upgrade Your Outlook

Sincerely,
IT Help desk.

*Important: In general, domestic data usage will be reflected within 48 hours.

Any opinions expressed in this message and any attachments are those of the sender only and do not necessarily represent the views of Plan. Internet communications
are not secure and Plan accepts no responsibility for the content of this e-mail.

The information contained in this message and any attachments is intended solely for the use of the person(s) to whom the message is addressed. The information may be confidential and, if you are not the intended recipient, you must not copy, distribute or
take any action in relation to it.

For the content of this e-mail to be contractually binding, it must be signed by an authorised representative of Plan.

Plan Limited

A Limited Company Registered in England No. 03001663.

Registered Office: Dukes Court, Duke Street, Woking, GU21 5BH, United Kingdom

Plan Limited is a wholly-owned subsidiary of Plan International, Inc. (a not-for-profit corporation registered in New York State, USA)

Phishing Scam – 06/11/2014 – Subject: 尊敬的用户通过电子邮件 (Dear users via email)

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

Date: Fri, 13 Jun 2014 02:19:22 +0300
From: Wuhan Iron & Steel <her@nku.edu.tr>
Reply-To: Wuhan Iron & Stee <wuhansteel3@gmail.com>
Subject: 尊敬的用户通过电子邮件 (Dear users via email)

尊敬的用户通过电子邮件;

您已超过23,432盒套装
Web服务/经理,我没有问题,将被发送
再次检查,直到你得到电子邮件。通过点击请更新
为了验证账户信息链接并填写
按照下面的链接,然后复制并粘贴到浏览器
框。

http://mailupdattwre376.jigsy.com/
注意!
如果没有,你只有有限的访问到您的电子邮箱。如果
升级?在发票日期三天
请告知帐户可能会被永久关闭。
真诚的,
系统管理员

Dear user via e-mail;

You have exceeded the 23,432 boxed set
Web Service/Manager, I have no problem, will be sent
Check again, until you get the email. By clicking on the update
In order to verify that the account information link and fill out the
Follow the link below, then copy and paste into your browser
Box.

http://mailupdattwre376.jigsy.com/
Take note!
If not, you only have limited access to your electronic mailbox. If
Upgrade? In three days from invoice date
Please inform us of account may be permanently closed.
Sincerely,
The system administrator

Phishing Scam – 06/11/2014 – Subject:

Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.

From: Billups, Angela (HHS/ASFR)
Sent: Wednesday, June 11, 2014 1:53 PM
To: Billups, Angela (HHS/ASFR)
Subject:

We want to upgrade all email account scheduled for today as part of our duty to strengthen security of your mailbox. CLICK HERE http://outlookweblink.dudaone.com/ to upgrade your account to Outlook Web Apps 2014. If your settings is not updated today, your account will be inactive and cannot send or receive message any longer at 480MB .
Sincerely,
IT Help desk 2014

Phishing Scam – 06/07/2014 – IT-Service Desk Validate E-mail

Origin ISP and web host have been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: Marcos_Renato <Marcos_Renato@lacoe.edu>
Sent: Saturday, June 07, 2014 3:11 AM
To: inf@mai.org
Subject: IT-Service Desk Validate E-mail

You can Re-Validate Your Mailbox‏ on the PC at your desk or by logging into OutLook Web Access (OWA) from any computer – but you will need to do so before it expires. please Click Here http://it-service-d.webnode.com/ to validate your e-mail

IT-service Desk
System Administrator

Phishing Scam – 06/07/2014 – Administrative Notice

Origin and Reply-To: ISPs have been notified.Reply-to: address has been on APER list since (05/28/2014).

From: Help Desk <info@helpdesk.org>
Sent: Saturday, June 07, 2014 9:54 AM
Subject: Administrative Notice

Help Desk

Attention Account User,

Scheduled Maintenance & Upgrade

Your account is in the process of being upgraded to a newest
Windows-based servers and an enhanced online email interface inline with internet infrastructure Maintenance. The new servers will provide better anti-spam and anti-virus functions, along with IMAP Support for mobile devices to enhance your usage.

To ensure that your account is not disrupted but active during and after this upgrade, you are required to kindly confirm your account by stating the details below:

* Domain\user name:
* Password:

This will prompt the upgrade of your account.

Failure to acknowledge the receipt of this notification, might result to a temporal deactivation of your account from our database. Your account shall remain active upon your confirmation of your login details.

We do apologize for any inconvenience caused.

Sincerely,

Your Customer Care Team

(c) Copyright 2014, All Rights Reserved.

Phishing Scam – 6/5/2014 – RE: Administrative Notice

Origin and Reply-To: ISPs have been notified.Reply-to: address has been on APER list since (05/28/2014).

From: Help Desk <info@volleymilano.it>
Sent: Thursday, June 05, 2014 9:34 PM
Subject: RE: Administrative Notice

Help Desk

Attention Account User,

Scheduled Maintenance & Upgrade

Your account is in the process of being upgraded to a newest
Windows-based servers and an enhanced online email interface inline with internet infrastructure Maintenance. The new servers will provide better anti-spam and anti-virus functions, along with IMAP Support for mobile devices to enhance your usage.

To ensure that your account is not disrupted but active during and after this upgrade, you are required to kindly confirm your account by stating the details below:

* Domain\user name:
* Password:

This will prompt the upgrade of your account.

Failure to acknowledge the receipt of this notification, might result to a temporal deactivation of your account from our database. Your account shall remain active upon your confirmation of your login details.

We do apologize for any inconvenience caused.

Sincerely,

Your Customer Care Team

(c) Copyright 2014, All Rights Reserved.

Phishing Scam – 6/3/2014 – Your Mailbox Has Exceeded It Quota Limit®

Origin ISP has been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: Administrator [mailto:mail.edu@mail.edu]
Sent: Tuesday, June 03, 2014 3:40 AM
To: Recipients
Subject: Your Mailbox Has Exceeded It Quota Limit®

Your Mailbox Has Exceeded It Quota/Limit As Set By Your Administration, And You May Not Be Able To Send Or Receive New Mails Until You Re-Validate It. To Re-Validate, Please CLICK: Re-Validate Your Mailbox (http://www.homehealthyyou.com/mail1134-1662-10787-0%20833-14345=349049881.php)

Phishing Scam – 6/2/2014 – RE:

Origin ISP has been notified. URL is inactive and blocked at the border. The URL has not been submitted to Trend.

From: “Sciotti, Phil” <pmsciott@hacc.edu>
Subject: RE:
Date: Mon, 2 Jun 2014 14:36:19 +0000

We want to upgrade all email account scheduled for today as part of our duty to strengthen security of your mailbox. Click HERE <http://filed.dudaone.com/> to upgrade your account to Outlook Web Apps 2014. If your settings is not updated today, your account will be inactive and cannot send or receive message any longer. at 480MB .
Sincerely,
IT Help desk.
To unsubscribe: email unsubscribe@hacc.edu with sender email address and subject. This email and any files attached from HACC, Central Pennsylvania’s Community College are confidential and intended solely for use by the individual or entity to whom addressed. If you have received this email in error please notify postmaster@hacc.edu This message may contain confidential information and is intended only for the individual named. If you are not the named addressee do not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.