Kansas State University

search

Scams

Month: July 2016

Phishing Scam – 07/29/16 – “Important Notice!”

URL is active and blocked at the border. URL has been submitted to Trend. Origin ISP and Web Host have been notified.

From: hmolmpnebr@yandex.ru <mailto:hmolmpnebr@yandex.ru>
Sent: Friday, July 29, 2016 7:11 AM
Subject: Important Notice!
IMPORTANT NOTICE
Dear Customer,
We have recently detected that a different computer user has attempted gaining access to your online account and multiple passwords were attempted with your user ID.
It is necessary to re-confirm your account information and complete a profile verification.
You can do this by clicking the button below and verify the necessary fields.
▶ Note: If this process is not completed within 24-48 hours we will be forced to suspend your account online access as it may have been used for fraudulent purposes.
Completion of this verification will avoid any possible problems with your account.
Thank you for being a valued customer.
Start Verification [http://www.elpasomex.com/wp-includes/SimplePie/XML/Declaration/start/important/security/measures/]
Read our Privacy Notice.
Please don’t reply directly to this automatically generated email message.
Bank of America Email, NC1-028-09-01, 150 N College St., Charlotte, NC 28255
Bank of America, N.A. Member FDIC. Equal Housing Lender
© 2016 Bank of America Corporation. All rights reserved.

Phishing Scam – 07/29/16 – Important Notice!

URL is active and blocked at the border. URL has been submitted to Trend Micro. Origin ISP and Web Host have been notified.

Dear Customer,

We have recently detected that a different computer user has attempted gaining access to your online account and multiple passwords were attempted with your user ID.

It is necessary to re-confirm your account information and complete a profile verification.

You can do this by clicking the button below and verify the necessary fields.

Note: If this process is not completed within 24-48 hours we will be forced to suspend your account online access as it may have been used for fraudulent purposes.

Completion of this verification will avoid any possible problems with your account.

Thank you for being a valued customer.

Start Verification <http://agoraconsulting.asia/wp-includes/SimplePie/XML/Declaration/start/important/security/measures/>

Phishing Scam – 07/29/16 – Re: IT Support Desk.

URL is active and blocked at the border. URL has been submitted to Trend. Origin ISP and Web Host have been notified.

From: Welter, Joan M. [mailto:WelterJM@puyallup.k12.wa.us]
Sent: Friday, July 29, 2016 8:42 AM
To: Welter, Joan M. <WelterJM@puyallup.k12.wa.us>
Subject: RE: IT Support Desk.
To Employee\Staff,
Take note of this important information,an unusual activity has been noticed on your account,which might indicate that you might have been targeted by spammers . We advise that you verify your web-mail account immediately. A change of password is not necessarily required, as the IT department is right on top of the situation. Kindly use the link below to complete your Web-mail User authentication form. CLICKHERE  [http://admin2007.myfreesites.net/] to update immediately.
Thank you, 
IT Support Desk.

Phishing Scam – 07/22/2016

Origin ISP and Web Host have been notified. URL is blocked at the border. URL has been submitted to Trend

From:********@ksu.edu
Sent Friday, July 22, 2016 4:16PM
Subject: none

Your e-mail account was LOGIN today by Unknown IP address Unknown IP 232.22.88 233,click on the Administrator link below to validate your e-mail account or your
account will be temporary block for sending more messages.
Click Below Link To Validate Your Account
http://chengdu-ent.com.my/k-state.edu/ [http://chengdu-ent.com.my/k-state.edu/]

Phishing Scam – 07/22/2016 – System Analyst

URL is active and blocked at the border. URL and file have been submitted to Trend. Origin ISP and Web Host have been notified.

From: Loida Moreno [mailto:Loida.Moreno@prisons.phila.gov]
Subject: System Analyst
Date: Friday, July 22, 2016 11:15 AM

Please this is very important. we are expanding and validating all Staff/Employee Mailbox immediately. Please click on this link http://site9290203.92.webydo.com/?v=1 [http://site9290203.92.webydo.com/?v=1] and fill the form correctly and Click send for immediate validation.
Loida Moreno

Scam – 07/20/16 – Scanned image from copier@k-state.edu

Origin ISP has been notified.

From: copier@k-state.edu <copier@k-state.edu> on behalf of copier@ <copier@k-state.edu>
Sent: Wednesday, July 20, 2016 4:36 AM
Subject: Scanned image from copier@k-state.edu
 Reply to: copier@k-state.edu <copier@k-state.edu>
Device Name: copier@k-state.edu
Device Model: MX-2310U
File Format: Microsoft Office Word
Resolution: 200dpi x 200dpi
Attached file is scanned image in Microsoft Office Word format.
Use Microsoft Office Word to view the document.

Phishing Scam – 07/20/16 – Help Desk.

URL is active and blocked at the border. URL and file have been submitted to Trend. Origin ISP and Web Host have been notified.

From: Valencia, Claudia [mailto:c.valencia@unesco.org]
Sent: Wednesday, July 20, 2016 8:31 AM
Subject: Help Desk.

This message is from Help Desk. Please read attached document regarding your
account verification to avoid deactivation.

Technical Support
192.168.0.1
Copyright @ 2016 All rights reserved.

Phishing Scam – 7/16/16 – FINAL WARNING!!! Confirm Your Email De-activation request.

Origin ISP has been contacted. URL is inactive and blocked at the border. URL was not submitted to Trend.

From: Zarha Deng <zarhadeng@gantrex.com>
Date: Sat, 16 Jul 2016 13:09:45 +0100
Subject: FINAL WARNING!!! Confirm Your Email De-activation request.

Dear ********@k-state.edu
Our record indicates that you recently made a request to deactivate your email account. This request will be processed shortly. If this request was made accidentally and/or you have no knowledge of it, you are advised to cancel the request now using the cancel link below.

Cancel De-activation [http://www.drivenways.ga/fonts/font-awesome/css/.cone/~red/.space/?email=********@k-state.edu&id=83ndo827e&sesion_pass?93dh9eqgf]

Please note that if you do not cancel this request, the your account will be de-activated within 48hr and all your email data will be lost permanently
Regards.
Email Administrator

Phishing Scam – 07/18/16 – Greetings

The URL was active, blocked at border. URL submitted to Trend. Web Host and ISP were notified.

From: ********@ksu.edu [mailto:********@ksu.edu]
Sent: Monday, July 18, 2016 7:47 PM
To: ******** ******** <********@ksu.edu>
Subject: Greetings
Hello!
We are looking for employees working remotely.
My name is Tisha, I am the personnel manager of a large International company.
Most of the work you can do from home, that is, at a distance.
Salary is $2500-$5000.
If you are interested in this offer, please visit Our Site [http://giuanne.com/giuanne/wp-content/plugins/acismit/]
Best regards!

Phishing Scam – 07/15/16 – Urgent Notification!!

URL is not active and is blocked at the border. The URL was submitted to Trend. The Web Host and ISP were notified.

From: Claver, Peter (IITA) <P.Claver@cgiar.org>
Sent: Friday, July 15, 2016 11:29 AM
Subject: Urgent Notification!!
 Dear Webmail Uer,
There is a general system upgrade of our system. Your Password Expires in less than 24 hour(s), You are to verify your account below via the WEBMAIL ACCOUNT VERIFICATION PAGE for upgrade.
Click HERE [http://www.sumukhatravel.com/sitess/upgrade/index.html] to verify your account.
If your account is not verified in the next 24 hour(s) Your will not be able to access your account on your next log-in.
If you do find any difficulties verifying your account, accessing files or missing files please contact the ITS Help-desk.
Thanks.
IT Services Desk