Kansas State University

search

Scams

Month: September 2016

Phishing Scam – 9/30/2016 – Important message from KSU Faculty/Staff

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Kansas State University <**********@k-state.edu>
Date: Friday, September 30, 2016 at 3:52 PM
Subject: Important message from KSU Faculty/Staff
You have new important message from Faculty/Staff.
Click here [http://176.53.84.3/~doganseh/cimenelektronik/wp-admin/js/eid.k-state.edu.html] to read
 Thank You
Kansas State University 

Phishing Scam – 09/30/2016 – To All Faculty\Staff

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Sang Bang <sbang@ivc.edu>
Sent: Friday, September 30, 2016 4:17 AM
Subject: To All Faculty\Staff

ake note of this important update that our new web mail has been improved with a new messaging system from Outlook Web Access which also include faster usage on email, shared calendar, web-documents and the new 2016 anti-spam version.
Please use the link below to complete your upgrade for our new Outlook Web Access improved web mail.
CLICK on FACULTYANDSTAFFUPGRADE <http://www.nwfl.com.ng/odbb/>
Regards,
IT Service Desk Support.

Phishing Scam – 09/30/2016 – Dear Account User

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Audrey Hauth <Audrey.Hauth@CSULB.EDU>
Subject: [IDM-DEV-L] Dear Account User
Date: September 30, 2016 at 2:45:23 AM CDT

Mailbox has exceeded the storage limit which is 20GB as set by your administrator,you are currently running on 20.9GB,you may not be able to send or receive new mail until you re-validate your mailbox. To re-validate your mailbox please click this:  https://mail.csulb.edu/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fmail.csulb.edu%2fowa%2f <http://www.imcreator.com/free/csulb.edu/csulbedu>
Warning!!! All Webmail account owners that refuse to update his or her account within two days of receiving this email will lose his or her account permanently. (c) Microsoft Exchange 2016. We apologize for any inconvenience this may have cause you. Thank you for using Webmail
Thank you.
System Administrator.
Case number: 8941624
Property: Account Security
Copyright (c) Microsoft Corporation. All rights reserved.
Connected to Microsoft Exchange

Phishing Scam – 09/27/2016 – NoTiCe..

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: Hall, j <j.hall@wsu.edu>
Sent: Thursday, September 22, 2016 2:53 PM
Subject: NoTiCe..

We hereby notify you in regards to some unusual login attempt to your mailbox. We advise you promptly comply to this special announcement to protect your account. Kindly Click Here [http://web30upgrd.16mb.com/] to validate your mailbox.
Thank you for helping us protect you.
IT Helpdesk Support.

Phishing Scam – 09/27/2016 – Request to shutdown account

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: eMail Administrator <service@efox-shop.com>
Date: Tue, 27 Sep 2016 13:26:17 +0100
Subject: Request to shutdown account

Hello ********@ksu.edu
We received your multiple request to shutdown your account, We will process this request within 48 hours.
All emails associated with your account will be lost. To retain your account, kindly Cancel Request to continue using our services.
Click here to continue using our service (CANCEL REQUEST)<http://blog.bsdsolutions.com.ar/deportes/log.php?email=********@ksu.edu>

Yours Sincerely,
Customer Team Support.

Phishing Scam – 09/26/2016 – ATTENTION

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: Sawyer, Anne
Sent: Monday, September 26, 2016 4:01 PM
Subject: ATTENTION

Important Message : Update Your Outlook Server
To ensure that your email is safe and secure it is important that you verify your details follow the reference below:
Note: Verify Access Details [http://www.chioggiapp.it/ZERO/OWA(1).HTML]
Regards
Sawyer anne.

Outlook Department Service

Phishing Scam – 09/26/2016 – RE: HELP-DESK

From: Lowery, Shana &ltShana.Lowery@hhchealth.org&gt
Subject: RE: HELP-DESK
Sent: Monday, September 26, 2016 2:55 PM

Notice from Microsoft Outlook Web Upgrade, we’re updating all ADMIN, FACULTY, STUDENT and STAFF MAILBOX QUOTA from 500MB to 50GB. Kindly click HERE [http://cecop.com.co/wp-admin/home/index.htm] for UPGRADE and increase of MAILBOX QUOTA.  
Thank you
IT HELP DESK.

***************************
Trend has already blocked the URL

Phishing Scam – 09/26/2016 – Scheduled Maintenance & Upgrade

Origin ISP and Reply-To ISP have been notified. Reply-To email address has been submitted to the APER list.

From: Help Desk <HilmerD@ci.guilford.ct.us>
Subject: Scheduled Maintenance & Upgrade
Date: September 23, 2016 at 9:09:51 PM CDT
Reply-To: <help.desk.team0016@tech-center.com>

Scheduled Maintenance & Upgrade

Your account is in the process of being upgraded to a newest
Windows-based servers and an enhanced online email interface inline with internet infrastructure Maintenance. The new servers will provide better anti-spam and anti-virus functions, along with IMAP Support for mobile devices to enhance your usage.

To ensure that your account is not disrupted but active during and after this upgrade, you are required to kindly confirm your account by stating the details below:

* Domain\user name:
* Password:

This will prompt the upgrade of your account.

Failure to acknowledge the receipt of this notification, might result to a temporary deactivation of your account from our database. Your account shall remain active upon your confirmation of your login details.

During this maintenance window, there may be periods of interruption to email services. This will include sending and receiving email in Outlook, on webmail, and on mobile devices. Also, if you leave your Mailbox open during the maintenance period, you may be prompted to close and reopen.

We appreciate your patience as this maintenance is performed and we do apologize for any inconveniences caused.

Sincerely,

Customer Care Team

CONFIDENTIALITY NOTICE: The contents of this email, all related responses and any files and/or attachments transmitted with it are CONFIDENTIAL and are intended solely for the use of the individual or entity to whom they are addressed (or authorized to receive for the addressee). This email may contain legally privileged information and may not be disclosed or forwarded to anyone else without authorization from the originator of this email. If you have received this email in error, please notify the sender immediately and delete all copies from your system. Messages to or from the Town of Guilford may be subject to the Freedom of Information Act (Conn. Gen. Stat. sections 1-200 et seq.)

Phishing Scam – 9/26/16 – WARNING!! Your Urgent Attention Is Needed!

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: ******* ********
Sent: Monday, September 26, 2016 8:59 AM
To: ******** ********<********@ksu.edu>
Subject: WARNING!! Your Urgent Attention Is Needed!

Welcome to Kansas State University

Monday, 26 September 2016

Update Your Kansas State University email Account

Click Here To Update Your Email Account <http://www.ploumidis-urology.gr/https.signin.k-state.edu.WebISO.login.service.3A.2F.2Fpassthrough.signin.k-state.edu1/k-state.edu.htm>

Thank You
SECURITY Department c Kansas State University

Phishing Scam – 09/26/2016 – Your Webmail Account Will Deleted Soon ! Update

Origin ISP has been notified. URL is currently inactive and has been blocked at the border. URL was not submitted to Trend.

From: Williams, Monica M. <mowillia@UTMB.EDU>
Sent: Sunday, September 25, 2016 12:11 AM
Subject: Your Webmail Account Will Deleted Soon ! Update

Your Webmail account certificate expired on 16.9.2016, it may interrupt your email delivery configuration, and POP account settings page error when messaging.To re-new
your webmail certificate, please take a moment to update your records per link below or copy and paste link.
actwebweb.96.lt
Account will function as normal after the verification process,
webmail and your certificate will be re-newed.