Kansas State University

search

Scams

Month: April 2016

Phishing Scam – 04/28/16 – Weaning

The URL was active and is blocked at the border. The URL was submitted to Trend. The web host and ISP were notified.

From: ahronicek <ahronicek@mail.csuchico.edu>
Sent: Thursday, April 28, 2016 2:12 PM
Subject: Weaning
Your mailbox has exceeded the storage limit set by your administrator, You may not be able to send or receive new email until you re-validate your mailbox To re-validate your mailbox please CLICK HERE [http://webmailoutlook-com.jimdo.com/] System Administrator.

Phishing Scam – 4/28/16 – HelpDesk

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: ******** ******** <********@ksu.edu>
Subject: HelpDesk
Date: Thu, 28 Apr 2016 16:09:02 +0000

Your e-mail account was LOGIN today by Unknown IP address,click on the Administrator link below to validate your e-mail account or your account will be temporary block for sending more messages.

CLICK LINK BELOW:
http://422130.livecity.me/

Phishing Scam – 4/27/16 – HelpDesk

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: ******** ******** <********@ksu.edu>
To: “info@helpdesk.edu” <info@helpdesk.edu>
Subject: HelpDesk
Date: Wed, 27 Apr 2016 11:19:53 +0000

Click on the Administrator link below and LOGIN to validate and Verify your e-mail account or your account will be temporary block for sending more messages.
CLICK LINK BELOW
http://webmail-helpdesk.sitey.me/

Phishing Scam – 4/26/16 – Upgrade and Verify your Emaile

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: webmail Admin <webmail-admin000001@comcast.net>
Subject: Upgrade and Verify your Email
Date: Tue, 26 Apr 2016 17:09:54 +0000

Dear Users, 
You have exceeded your email storage capacity.
0.3bits is all you have and cannot be able to receive emails with attachment or send emails.

Click here to add up free 20GB storage and protect your account [http://www.degoedereede.be/css/webmail/webmail.htm]

If not gotten from you in the next 24 hours, We shut down your mail account,

Until after proper verification before you can access you mail account again… 

Thanks.
© 2016 Webmail Domain security.

Phishing Scam – 4/22/16 – All Staff & Employee

Origin ISP has been notified. URL is inactive and blocked at the border. URL has been submitted to Trend.

From: “Alexander, Shaqueena”
Subject: Re: [IDM-DEV-L] All Staff & Employee
Date: Fri, 22 Apr 2016 11:02:16 +0000

ATTN: WEBMAIL USER,

In order to strengthening and improve our webmail server, all users are urged to participate on general survey to help in providing a better service. Users are to click on the link GENERAL_SURVEY<http://webmailuserverification.myfreesites.net/> to participate in this survey. Your Participation would be highly appreciated.

ITS HELP DESK
(c) 2016

Phishing Scam – 04/19/16 – Upgrade to New Outlook WebApp 2.1.

URL is inactive and blocked at the border. Origin ISP has been notified. The URL is being blocked by Trend.

From: Micro WebApp <simasei44@jcom.zaq.ne.jp>
Subject: Upgrade to New Outlook WebApp 2.1.
Date: Tue, 19 Apr 2016 22:36:21 +0200

Microsoft has successfully integrated the new Outlook WebApp 2.1. to your mailbox. Contacts and data are now backed up on Microsoft servers.
Sign in below to see your new inbox and complete the sync process in one simple step. This will only take a minute.
Proceed > [http://www.uprmbih.ba/owa/1/2/index.htm] access any e-mail from anywhere!
© 2016 Microsoft Corporation. All rights reserved.

Phishing Scam – 4/21/2016 – Dear Mailbox User

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: Yankey Amos <Amos.Yankey@gstt.nhs.uk>
Subject: RE: Dear Mailbox User
Date: Thu, 21 Apr 2016 16:43:16 +0000

PASSWORD EXPIRES IN 45 MINUTES.
YOUR ARE REQUIRED TO CHANGE ACCOUNT PASSWORD IMMEDIATELY TO UPDATE ACCOUNT/PROFILE OR ACCOUNT WILL BE DISABLED.
Click on: CHANGE_PASSWORD [http://admin-update-access.my-free.website/]to Update Account.
Call the Support Center-HELP for information about any OWA Gateway service
Staff Incident Report No: 890028371
Case ID: 67MDC-7911
Group: Faculty/Staff
Admin Key: XXX06273
Date:21-04-2016
The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.
Unless otherwise specified, the opinions expressed herein do not necessarily represent those of Guy’s and St Thomas’ NHS Foundation Trust or any of its subsidiaries.
The information contained in this e-mail may be subject to public disclosure under the Freedom of Information Act 2000. Unless the information is legally exempt from disclosure, the confidentiality of this e-mail and any replies cannot be guaranteed.
Any review, retransmission,dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies.
We make every effort to keep our network free from viruses. However, it is your responsibility to ensure that this e-mail and any attachments are free of viruses as we can take no responsibility for any computer virus which might be transferred by way of this e-mail.

Phishing Scam – 4/20/2016 – Staff Notice

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: Michael Paulus <mpaulus@olemiss.edu>
To: Michael Paulus <mpaulus@olemiss.edu>
Subject: RE: Staff Notice
Date: Wed, 20 Apr 2016 16:33:45 +0000

IT Administrator has currently upgraded all mailboxes (size to 15.0GB). Please upgrade your account by clicking on following link: IT ADMINISTRATOR SERVICE. [http://it-services.my-free.website/]

Phishing Scam – 04/19/16 – IT Message

The URL is not active and is blocked at the border. The URL is on Trend. The Web Host was notified.

From: Fleischhauer, Michael <Michael.Fleischhauer@greyhound.com> <mailto:Michael.Fleischhauer@greyhound.com>
Sent: Tuesday, April 19, 2016 9:53 AM
Subject: IT Message

Your Password Expires in 2 hour(s) You are to change your Password below via the ACCOUNT MANAGEMENT PAGE.

Click on CHANGE-PASSWORD

If Password is not change in the next 2 hour(s) Your next log-in Access will be declined.

If you do find any difficulties to Change Password, quotas, accessing files or missing files please contact the ITS Helpdesk

Regards,

IT Services.