Kansas State University



Month: December 2015

Phishing Scam- 12/10/15- “Quota Warning”

URL is active and blocked at the border. Origin ISP and Web Host have been notified. URL was submitted to Trend.

From: Jessie Park
Sent: Wednesday, December 9, 2015 6:00 PM
Subject: Quota Warning

Your mailbox size has reached 1969MB, which is over 90% of your 2000MB quota. and you may not be able to send or receive new mail until you re-validate your mailbox. To re-validate your mailbox CLICK HERE [http://www.rk-deboogerd.nl/acc/] .
Admin Server Portal.

12/08/15 – Suire resume

Origin ISP has been notified. Attachment has been submitted to Trend Micro.

There is a potentially harmful attachment along with the email below.

From: Rosa Wilhoit <vq202024242wj@163.com [mailto:vq202024242wj@163.com]>
Date: Tuesday, December 8, 2015 at 8:47 AM
To: ****** ***** <*****@ksu.edu [mailto:*****@ksu.edu]>
Subject: Suire_resume
Hello! my name is Andrea Suire, attached is my resume!,
Feel free to contact us for further information,
Sincerely Yours
Andrea Suire

Phishing Scam – 12/08/15 – Account verification

Origin ISP and Reply-To have been notified. Sender has been reported to APER.

From: ITS Service Desk [mailto:crobbins4@mail.csuchico.edu]
Sent: Tuesday, December 08, 2015 3:27 AM
Subject: Account verification.

Due to our data base storage limit, we are carrying a system upgrade on all K S U valid emails to enable us increase our storage limit which you are required to provide the below information to enable us carry out this services.
Full Name:
Email Address:
Confirmation Password:
Date of Birth:
Here are some ways to help you manage your account after you reconfirm your account. Create an archive – Set up a folder on your PC’s hard drive where you can save large attachments. Then just delete them from your inbox. You’ll still have them and your in-box will be that much smaller. Make your filters work for you- Did you know you can set up your E-mail account to immediately delete junk e-mail? Go to Options, and click Filters and reporting. Under the “Delete junk e-mail” section, select immediately to delete junk e-mail right away.
Once you’re finished, click Save and you’re done. Delete a bunch of
mail at once- Go to your Junk and Deleted folders, and clear them out by clicking the “Empty” button in the action bar.

Kennesaw State University
1000 Chastain Road
Kennesaw, GA 30144

Phishing Scam – 12/4/15 – Zimbra Mail Verification

URL is inactive and blocked at the border. Origin ISP and Web Host have been notified. URL was not submitted to Trend.

From: secure zimbra =?utf-8?Q?em=C9=99il?= <lalm@nitrkl.ac.in>
Subject: Zimbra Mail Verification
Date: Fri, 4 Dec 2015 06:38:07 +0530

Zimbra Collaboration Suite
You are currently viewing Zimbra in basic HTML. Why? | Follow the link bellow for faster, better Zimbra mail.
Copyright © 2015 Zimbra! Inc. All rights reserved.Copyright/IP Policy | Terms of Service

Phishing Scam – 12/02/2015

The URL is blocked at the border and was active. The URL was submitted to Trend. The ISP and Web Host were notified.

From: Wilma Murphy [mailto:WMurphy@mcn-nsn.gov]
Sent: Wednesday, December 02, 2015 11:11 AM
Subject: RE: IT Service Desk.
From: Wilma Murphy
Sent: Wednesday, December 02, 2015 10:16 AM
Subject: IT Service Desk.


Your Password Expires in 2hour(s) You are to change your Password below via the ACCOUNT MANAGEMENT PAGE.
Click on CHANGE-PASSWORD​ <http://wp-admin.ezweb123.com/>

If Password is not change in the next 2hour(s) Your next log-in Access will be declined.
If you do find any difficulties to Change Password, quotas, accessing files or missing files please contact the ITS Helpdesk.

IT Service Desk.​

Phishing Scam – 11/14/15 – K-State University {Alert***

Origin ISP and web host have been notified. Reply-to address has been submitted to the APER list.

From: “Kansas State University {IT Centre}” <grasmickcj@grizzlies.adams.edu>
Date: November 14, 2015 at 12:54:25 PM CST
Reply-To: itwebmaster@mail2webmaster.com
Subject: K-State University {Alert***

This is to notify you that the Kansas State University received a terror threat through your email concerning the University information systems shutdown.The (IT) Policy Help Center STRICTLY require mail account cleared from sending terror messages through the University email system and also to upgrade your email account for an active affiliation with cyber technology services. You are required to provide the following information in response to this email for activation and proper verification and scrutiny:
Your email account is scheduled to be deactivated within 24 hours of “Non Compliance.After that time, you will not be able to access your mail box. Emails sent to your mailbox will be rejected.
Kansas State University
Manhattan, KS 66506485-532-6011
© Kansas State University
Site maintained by IT Division