Kansas State University

search

Scams

Month: December 2016

Phishing Scam – 12/30/16 – Fwd: helpdesk

Web Host has been notified. URL has been submitted to Trend.

From: Grace <******@ksu.edu>
Date: December 30, 2016 at 4:43:17 PM CST
To: “info@helpdesk.edu”
Subject:helpdesk
Your e-mail account was LOGIN today by Unknown IP address, click on the Administrator link below to validate your e-mail account or your account will be temporary block for sending more messages.
Click Below:
http://ksu-helpdesk.strikingly.com/ [http://ksu-helpdesk.strikingly.com/]

Phishing Scam – 12/22/16 – Important Announcement from President Richard B. Myers

Origin ISP and Web Host have been notified. Attachment has been submitted to Trend for analysis. URL is active and blocked at the border. URL has been submitted to Trend.

From: “******* ******** <*********@k-state.edu>” <rconford@umass.edu>
Date: Thu, 22 Dec 2016 11:28:28 -0500
Subject: Important Announcement from President Richard B. Myers

Dear K-State Family,

Please read attached for an important announcement from President Richard B. Myers

Sincerely,

K-State Proud,
Richard B. Myers
President

Office of the President
110 Anderson Hall
Kansas State University
785-532-6221
********@k-state.edu

Phishing Scam – 12/21/106 -FW: Your Apple ID information has been updated.

From: Apple
Sent: Wednesday, December 21, 2016 11:26 AM
Subject: Your Apple ID information has been updated.
Dear info@dancingdots.com,

The following changes to your Apple ID, were made on December 20, 2016 at 3:29:02 AM (GMT):
Zip Code
If you did not make these changes or you believe an unauthorized person has accessed your account, you should update your information as soon as possible from your Apple ID account page at My Apple ID <http://electricazteca.com/tmp/apple/index.html>.
Apple Support.

Phishing Scam – 12/20/2016 – FW: Last Warning Upgrade To Secure Your Account – Effective Immediately!!!

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Cameren Rutz [mailto:cameren.rutz@365.elmhurst.edu]
Sent: Tuesday, December 20, 2016 4:42 PM
Subject: Last Warning Upgrade To Secure Your Account – Effective Immediately!!!
Dear Account User,
Your Outlook Web App has recently been subjected to security modification due to authentication failed by regular hack attempt of an incorrect User name that was entered in your account.
Let make sure it’s you! To keep your account secure we need to re-validate your account by clicking on “Secure My Account” to verifying/change your password information on the file below to helps protect your account from unauthorized access.
ITS Help Desk
Information Technology Services

Phishing Scam – 12/14/16 – PDF Document Notification

URL is not active and is blocked by Trend. Web Host and ISP were notified.

From: Adobe Systems [mailto:chaudhr2@purdue.edu]
Sent: Wednesday, December 14, 2016 11:34 AM
To: me <chaudhr2@purdue.edu>
Subject: PDF Document Notification
<http://landing.adobe.com/dam/global/images/acrobat-pro-dc.mnemonic.480×468.png> <http://s7d9.scene7.com/is/image/AdobeDemandCreative/?fmt=png&size=400,60&wid=400&textAttr=144,strong&resolution=200&textPs=%7B%5C*%5Ciscolortbl%3B333333%3B%5Cfonttbl%7B%5Cf0%20Adobe%20Clean%20Light%3B%7D%7D%5Cf0%5Cfs40%5Csl-560%5Cvertalc%5Ckerningoptical%5Ccf1Adobe%20Acrobat%20Pro%20DC>
<http://landing.adobe.com/dam/global/images/adobe-logo.red-tag.78×128.png>
PDF Document Notification
You have received a document from your school

View Document <http://primayzes.com/web/Adobe-File.htm>

This document will remain on our file server for a limited period of time.

Phishing Scam – 12/13/16 – Unpaid tax 40qtgsS

The ISP has been notified. The file was sent to Trend.

From: Unpaid Tax [mailto:calafeteanubogdan@yahoo.com]
Sent: Tuesday, December 13, 2016 10:50 AM
To: ******** ******** <********@ksu.edu>
Subject: Unpaid tax 40qtgsS
Hello!
Unfortunately I have to inform you that our tax inspector has informed our company that the income tax for your recently received bill had not been yet.
As far as we can see, it has already come to $70.56.
All details are in the attached document.
We ask you to proceed it as soon as you can.
—-
Best Wishes,
Rita Brunker
Financial Director–Multinational Group

Phishing Scam – 12/12/16 – Mail Box Exceeded

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL is being blocked by Trend.

From: “Hartnett, Smiljana” <hartnetts@cod.edu>
Subject: Mail Box Exceeded
Date: Mon, 12 Dec 2016 13:01:54

Dear Staff/Employee.
Your email account has exceeded its storage limit. Kindly CLICK HERE TO UNBLOCK [http://outlookupgrade-ictunit-2016.sitey.me] fill to have more space on your mail box.
Regards,
Admin Help Desk. Connected to Microsoft Exchange.
©2016 Microsoft Corporation. All rights reserved.

Phishing Scam – 12/12/16 – your email account is temporary deactivated

Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.

From: Kansas State University <*******@ksu.edu>
Date: Mon, 12 Dec 2016 08:16:38 -0800
Subject: your email account is temporary deactivated.

The Kansas State University

Due to a recent security issue your email account is temporarily deactivated.
You are required to reactivate your Kansas State University email account in less than
24 hours.follow below link and reconfirm your Kansas State University email account details.

http://sevenoaktrees.com/https.signin.k.state.edu.WebISO.login.service.https.3A.2F.2Fpassthrough.signin.k.state.edu.2Fpassthrough/k-state.edu.htm

Thank You
© Kansas State University

Phishing Scam – 12/10/16 – Re-validation of account

Origin ISP and Web Host have been notified. URL is inactive and blocked at the border. URL is being blocked by Trend.

From: eMail Admin <eunicemuin@kemsa.co.ke>
Date: Sat, 10 Dec 2016 13:27:30 +0100
Subject: Re-valadition of account

Re-Validate Your Email
Dear User,
Your Incoming messages are queued and placed on pending delivery because your email storage limit is exceeded. Your are required to upgrade mail quota (free) to restore normal email delivery.
Upgrade Mail Quota <http://tinyurl.com/zgugo2t> <http://gumusaluminyumkupeste.com/Tema/new.php>
Thank you.
Mail Administrator.