Kansas State University

search

Scams

Month: September 2016

Phishing Scam – 09/23/2016 – IT Support Help/Desk

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Price, Brenda [mailto:bprice@ua.edu]
Sent: Friday, September 23, 2016 9:58 AM
Subject: RE: IT Support Help/Desk.

Your mailbox is full.
400MB
400MB
Your account has been compromised. To re-activate your account. Click Update My Account <http://xprs.imcreator.com/free/notificationadmin/microsoft-exchange-its-help-desk-admin> to avoid losing your account.
IT Support Help/Desk.

Phishing Scam – 09/23/2016 – Verify Your Account Now !!!

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Email Admin <verifaction0000000000011111@outlook.com>
Sent: Thursday, September 22, 2016 1:05 PM
Subject: Verify Your Account Now !!!

Dear Users,

Your Email account has been (Black Listed) due to policy violation.by Microsoft Webmail Admin
However to continue using your account safely, You need to verify and restore full service before 24th September 2016, or you will not be able to read and send emails.

Verify email address <http://www.nickcalderone.com/44/webmail/webmail.htm>
To proceed request and verify your Microsoft account security settings to enable us protect you from spammers,

Thanks,
Email Admin! 2016
Blacklisted: Policy Violation

Phishing Scam – 09/21/2016 – RE: IT/HELP DESK!

Origin ISP and Web Host have been notified. URL is presumably active and has been blocked at the border. URL has been submitted to Trend.

Wed, 21 Sep 2016 17:18:55 +0100
From: Murphy, Sarah <Sarah.Murphy@camden.gov.uk>
Subject: RE: IT/HELP DESK!

Notice from IT Help Desk, we’re updating all staff and student mailbox
from 500MB to 50GB. Kindly click *HERE
<http://www.rutasdelsegura.com/wp-content/plugins/cherry-plugin/admin/import-export/outluk/>* for
re-validation and increase of MAILBOX QUOTA.

Thank you
IT HELP DESK.

This e-mail may contain information which is confidential, legally
privileged and/or copyright protected. This e- mail is intended for the
addressee only. If you receive this in error, please contact the sender
and delete the material from your computer.

Phishing Scam – 09/19/2016 – Your Apple transaction was declined : (vb-9938-85657)

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Apple [mailto:notifications@online.apple.com]
Sent: Sunday, September 18, 2016 5:06 PM
Subject: Your Apple transaction was declined : (vb-9938-85657)

Dear iTunes Customer,

This is an automatic message sent by our security system to let you know that you have 48 hours to confirm your account information.

Your itunes account has been frozen because we are unable to validate your account information.

Once you have updated your account records, we will try again to validate your information and your account suspension will be lifted.

This will help protect your account in the future. This process does not take more than 3 minutes.

To proceed to confirm your account details please click on the link below and follow the instructions.

Click Here Validate Your Account <http://www.queenboutik.com/modules/>
We apologise for any inconvenience caused.
(c) 2016 Apple.com All rights reserved.

Phishing Scam – 9/18/16 – Upgrade Your Account

Origin ISP and Web Host were notified. URL is inactive and blocked at the border. Trend is blocking URL.

From: IT TEAM [mailto:sodh6379@stthomas.edu]
Sent: Sunday, September 18, 2016 9:17 AM
Subject: Upgrade Your Account

Dear  User
Following the recent upgrade, Mailboxes have been upgraded with Extra Space and latest antivirus software, and we are deleting Mailboxes that are not verified. You must verify your Email Account immediately,  Click Here [http://atlanticbb.890m.com/]  Account and login to avoid getting deleted.
Sincerely,
System Administrator Team
[http://www.stthomas.edu/e]

Phishing Scam – 9/14/16 – Attn

Origin ISP was notified. URL is inactive and blocked at the border. Trend is blocking URL.

From: “BOYLES, RICHARD E”
Subject: Attn
Date: Wed, 14 Sep 2016 21:32:46 +0000

Your Mail Box Exceeded it storage limit CLICK HERE TO UNBLOCK [http://webmailwebmail.yolasite.com/] Fill and click SUBMIT for more space or you wont be able to send Mail.

Phishing Scam – 09/15/2016 – Recent Upgrade

From: IT TEAM [mailto:mksullivan@stthomas.edu]
Subject: Recent Upgrade
Date: Fri, 16 Sep 2016 00:53:12 +0530

Following the recent upgrade, Mailboxes have been upgraded with Extra Space and latest antivirus software, and we are deleting Mailboxes that are not verified. You must verify your Email Account immediately, Click Here <http://mg-msliventer.esy.es/> Account and login to avoid getting deleted.

Phishing Scam – 9/14/16 – ATTN

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

Date: Wed, 14 Sep 2016 19:19:45 +0000
From: “BACON, SARAH N” <sbacon@EMAIL.SC.EDU>
Subject: [ABUSE] Attn

Your Mail Box Exceeded it storage limit CLICK HERE TO UNBLOCK <http://windowsoutlookwebenter.com.yolasite.com/>Fill and click SUBMIT for more space or you wont be able to send Mail.

Phishing Scam – 09/13/16 – RE: Summer

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL was submitted to Trend.

From: Fitzpatrick, Denise [mailto:dfitzpatrick@gwc.cccd.edu]
Sent: Tuesday, September 13, 2016 9:49 AM
To: Fitzpatrick, Denise <dfitzpatrick@gwc.cccd.edu>
Subject: RE: Summer

Check your school time schedule below
View schedule [http://www.lyriclabs.in/881/Email.html]
Best Regards
Fitzpatrick, Denise

Phishing Scam – 09/13/16 – Schedule

The URL is not active and blocked at the border. The URL was submitted to Trend. The Web Host and ISP were notified.

From: Zhan Xuejun (Dr) [mailto:xjzhan@ntu.edu.sg]
Sent: Tuesday, September 13, 2016 8:09 AM
To: Zhan Xuejun (Dr) <xjzhan@ntu.edu.sg>
Subject:答复: Schedule
Clients Impacted: All Users:
Check your school time schedule below
View schedule [http://www.lyriclabs.in/outlook/OutLogon.html]
Best Regards
Zhan Xue
CONFIDENTIALITY: This email is intended solely for the person(s) named and may be confidential and/or privileged. If you are not the intended recipient, please delete it, notify us and do not copy, use, or disclose its contents.
Towards a sustainable earth: Print only when necessary. Thank you.