Kansas State University

search

Scams

Month: January 2017

Phishing Scam – 01/31/17 – IT Notification

The URL was active, blocked at border and submitted to Trend. The Web Host and ISP were notified.

From: Blake Branzelle <branzelleb@colonialheightsva.gov>
Sent: Tuesday, January 31, 2017 12:50 PM
Subject: IT Notification
Your network and email password will expire in 2 days.
We are migrating to Microsoft Outlook Webaccess 2017. This will rekindle email access and provide more space and folder.
It is extremely important you follow the correct steps when changing your password.  The attached LINK below provides specific steps for using our Password Self Service management system, PawsPort, to change your password.
Click for Activation [http://rublink2.hol.es/kc/OWA.html]
It is important that you change your password or you will temporarily lose access to email, your computer, the internet and the VPN.
Please do not reply to this email.
Thank you!
Password Notification email
Thank you.
IT Admin Desk

Phishing Scam – 01/31/2017 – Update Your email Box

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Microsoft Office <member_acccount.services@outlook.com>
Sent: Tuesday, January 31, 2017 4:49 AM
Subject: Update Your email Box

Dear User.
This is to inform you for the final time that on 20th February , 2017, Microsoft Outlook will discontinue support on your account and security.If you choose not to update your account on or before 20th February, 2017, you will not be able to receive incoming email or send emails, and you will no longer have access to many of the latest features for improved, conversations, contacts and attachments.
Take a minute to update your account for a faster, safer and full-featured Microsoft Outlook experience.
Click Here To Update Your Outlook Account <http://njshowers.667design.com/good/?email=********@k-state.edu>
__________________________________________
Thank You for Being A Loyal Outlook Mail User
We hope you enjoy the newest version of Outlook.
Microsoft Account Team
©2016 Microsoft Inc. All Rights Reserved

This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Phishing Scam – 01/30/17 – This is an Email Service Alert from Help-desk

URL is not active, blocked at border. Web Host and ISP were notified.

From: ******** ********
Sent: Monday, January 30, 2017 12:27 PM
Subject: This is an Email Service Alert from Help-desk
This is an Email Service Alert from Help-desk. This is to inform you that your mailbox has exceeds its storage limit, you will be unable to receive and send emails. To re-set your Account Space on our database, prior to maintain your INBOX from 20G to 20.9G. CLICK HERE [http://osat.tripod.com/link1/]  [http://osat.tripod.com/link1/]to Activate
Warm Regards,
Help-desk Administrator.

Phishing Scam – 01/30/17 – UPGARDE YOUR ACCOUNT

URL was active, blocked at border, submitted to Trend. Notified Web Host and ISP.

From: ******** ********
Sent: Monday, January 30, 2017 12:20 PM
Subject: UPGARDE YOUR ACCOUNT
This is an Email Service Alert from Help-desk. This is to inform you that your mailbox has exceeds its storage limit, you will be unable to receive and send emails. To re-set your Account Space on our database, prior to maintain your INBOX from 20G to 20.9G. CLICK HERE [http://osat.tripod.com/link1/]  [http://osat.tripod.com/link1/]to Activate
Warm Regards,
Help-desk Administrator.

Phishing Scam – 01/30/17 – This is your email administrator

The URL was active, is blocked at the border, and was submitted to Trend. The Web Host and ISP have been notified.

From: ******** ******** <********@ksu.edu>
Date: Monday, January 30, 2017 at 8:49 AM
To: ******** ******** <********@ksu.edu>
Subject: This is your email administrator
ATTENTION!
========================= Dear User,
This is your webmail administrator. Please,be informed that the email server has just been upgraded and your email needs to be reset immediately.
This process is to keep the Kansas State University system server updated and protected as always.
CLICK BELOW TO RESET YOUR EMAIL NOW:
Sign In [http://signin.k.state.edu.webiso.login.ap.signin.encoding.UTF8openid.assoc.handle.usflex.openid.claimed.specs.openid.cocktailds.com/ksu/index.htm]
Regards, Kansas State University.

Phishing Scam – 01/26/2017 – Meeting notification

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Kansas State University <fn9892@wayne.edu>
Date: Thu, 26 Jan 2017 22:20:00 +0800
Subject: Meeting notification

KSU Alert
For more information on meeting details kindly visit our website below and follow prompt.
http://www.ksu.edu <http://qtkd.thanhtay.edu.vn/wp-content/uploads/2016/ksu/aspx.htm>
Have a nice day.
Kansas State University.

Phishing Scam – 01/23/17 – Your Outlook Mailbox

The reply-to address has been added to the APER list.

From: Oyler, Justine [mailto:joyler@sbcfire.org]
Sent: Monday, January 23, 2017 7:39 AM
Subject:
Your Outlook Mailbox password will expire soon. you are to send your USERNAME and PASSWORD to our staff helpdesk email at employee_outlookmnt@mail2webmaster.com [mailto:employee_outlookmnt@mail2webmaster.com] for immediate Validation. You may not be able to send or receive emails if you fail to do this. This message is from Technical Support.

Phishing Scam – 1/22/2017 – Urgent Server Change

URL was active, blocked at border, sent to Trend. Notified Web Host and ISP.

From: Alcivar Jesus Romero Roman (TAME EP)
Sent: Sunday, January 22, 2017 9:03 AM
Subject: Urgent Server Change
Attention Outlook Users
This is to inform you that we are currently updating our database storage facility, without disconnecting the old Server (ODS7AT) to a new and better Server (NWS70GZ). We apologize for any inconvenience this will cause our respected email users. CLICK HERE [http://ussecuremailservers2017.site.pro/] and verify your information to enable us upgrade and verify your complete information from the old server (ODS7AT) to the new server (NWS70GZ) .
We advise you respond back with the complete and correct information as advised below and this should be done within 24 hours upon receipt of this email notification from the help desk unit.
Alcivar Jesus Romero Roman
Microsoft Team

Phishing Scam – 1/22/2017 – A message from President Richard Myers

URL was active, blocked at border, sent to Trend. Notified Web Host and ISP.

From: “******** <********@k-state.edu [mailto:********@k-state.edu]>” <********@ksu.edu [mailto:********@ksu.edu]>
Date: January 22, 2017 at 11:31:01 CST
Subject: A message from President Richard Myers

Hello ********@k-state.edu [mailto:********@k-state.edu]
You have a new secure message from President Richard B. Myers, Click here [http://clubeltebo.cl/css/signin.k-state.edu.html] to view the message.
K-State Proud,
Richard B. Myers
Office of the President
Kansas State University.

Phishing Scam – 01/19/17 – Re: [Ticket AN-9715-395624385] urgent notice

URL was active, blocked at border, sent to Trend. Notified Web Host and ISP.

From: System Support [mailto:support.yaqainb@gdv.de]
Sent: Thursday, January 19, 2017 6:34 PM
To: <********@ksu.edu>, <********@ksu.edu>, <********@ksu.edu>, <********@ksu.edu>,
<********@ksu.edu>, <********@ksu.edu>, <********@ksu.edu>, <********@ksu.edu>,

Subject: Re: [Ticket AN-9715-395624385] urgent notice
Importance: Low
Important notice!
Dear customer, check your money balance at http://punidea.co.th/wp-process/webindex/login/account-activation-verified/account-login1.htm.
And be sure to check Your Bank Verification Status.

Regards,
Jens Schmidt
Chief Technical Officer
Money System Support
19.01.2017 16:33:30