Kansas State University

search

Scams

Month: February 2017

Phishing Scam – 02/27/17 – IT Support Help/Desk

URL is blocked at border and submitted to Trend. Web Host and ISP were notified.

From: Muhammad Aiman Rosli [mailto:aiman.rosli@opusbhd.uemnet.com]
Sent: Monday, February 27, 2017 5:49 PM
To: Muhammad Aiman Rosli <aiman.rosli@opusbhd.uemnet.com>
Subject: RE: IT Support Help/Desk.

Your mailbox is full.

400MB 400MB

Your account has been compromised. To re-activate your account. Click <http://www.imxprs.com/free/progress/webmaster> <http://www.imxprs.com/free/progress/webmaster> <http://web-mail-account-renwin1510.tripod.com/owa> to avoid losing your account.

IT Support Help/Desk.

Phishing Scam – 02/28/17 – Weekly Programme

URL was active, blocked at border, submitted to Trend. Web Host and ISP were notified.

From: Outlook Express <cunning219@btinternet.com>
Sent: Tuesday, February 28, 2017 9:23 AM
Subject: Weekly Programme
  You have (2)important unread mails Messages, Click on review here [http://tbaysurfshop.com/tr/office/index.html] to read it.

Phishing Scam – 02/27/17 – Your K-State eID Storage Limit Exceeded

Web Host has been notified. URL is active and has been blocked at the border. URL has been sent to Trend.

From: K-State eID [mailto:jcwilson@wowway.com]
Sent: Monday, February 27, 2017 1:24 PM
Subject: Your K-State eID Storage Limit Exceeded
Dear user,

Your K-State eID storage limit has exceeded the storage limit of 2GB which is defined by the IT administrator. You are running at 999.8 MB and you will not be able to send or receive new messages in few hours time until you re-new your mailbox.

Expand your mailbox storage at: https://www.k-state.edu/selfservice/exp <http://kansas-state-outlook-office-365.needforincreasewebspace.com/Kansas%20State%20University/k-state.htm>

Sincerely,

IT Help Desk
Office of Information Technology
helpdesk@k-state.edu

Phishing Scam – 02/27/17 – Secure Message from John

The URL was blocked at the border and sent to Trend. The Web Host and ISP were notified.

From: John [mailto:jhimes@liberty.edu]
Sent: Monday, February 27, 2017 1:01 PM
To: you <jhimes@liberty.edu>
Subject: Secure Message from John
You have received a secure message from John.
Click here to view message <http://s182202.gridserver.com/wp-includes/Outlook_signin.htm>
Please Note: Internal/Secure messages can only be accessed from your online portal.

Phishing Scam – 02/24/17 – Jane sent a folder to you

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL is being blocked by Trend.

From: Jane via Dropbox [mailto:s.crossley@admin-onecpd.co.uk]
Sent: Friday, February 24, 2017 4:25 PM
To: me <s.crossley@admin-onecpd.co.uk>
Subject: Jane sent a folder to you

<https://www.dropbox.com/static/images/emails/glyph/glyph_34@2x.png>

Jane has shared a folder (Signed-Application form.pdf) with you.

View Document Now <http://newmetekhi.ge/wp-includes/http/www/dropbox/com/SSL-Review/>
Sender Message: “This is a copy of your application form has been signed and confirmed, please review and reply to give me the go ahead to submit. Jane”
Thank you,
– The Dropbox Team.

Phishing Scam – 02/27/17 – RE: IT SERVICE DESK

Web Host has been notified. URL is active and has been blocked at the border. URL has been sent to Trend.

From: Adams, Dawn A. <AdamsDa@somc.org>
Sent: Monday, February 27, 2017 8:26 AM
To: Adams, Dawn A.
Subject: RE: IT SERVICE DESK
From: Adams, Dawn A.
Sent: Monday, February 27, 2017 9:19 AM
Subject: IT SERVICE DESK
Your password Expire In TWO{2}Hours Current Mail Users Should Please Log On To IT WEBSITE [http://ictservicedesk1.tripod.com/outlook/] To Validate …..

Phishing Scam – 02/25/17 – Become Mystery/Secret Shoppers @2017

The URL was blocked at the border and sent to Trend. The Web Host and ISP were notified.

From: Tyler Thomas <vmr13c@my.fsu.edu>
Sent: Saturday, February 25, 2017 6:43 AM
To: Recipients
Subject: Become Mystery/Secret Shoppers @2017

DEAR APPLICANT,
We are accepting applications for qualified individuals to become Mystery/Secret Shoppers/Administrative Assistant.
You will receive a flat sum of $500 per assignment. Your employment packet will include funds for your evaluation which The company will furnish you with all expense needed for the assignment and any other expense incurred during the course of executing your assignment.
Job Description:
1. You will receive funding for the assignment.
2. You will receive the Instruction for your assignment via email on the location and details of the assignment.
3. You are to complete the assignment as fast and discreetly as possible.
4. You will be asked to visit a business location to conduct business be it a restaurant, shopping store etc.
To get started Immediate, Click here<https://form.myjotform.com/70534818999575>

Phishing Scam – 02/27/17 -You have a message from Dr. Pat Bosco

The URL was active, is blocked at border, was submitted to Trend. The Web Host and ISP have been notified.

Sent: Monday, February 27, 2017 8:39 AM
To: ******** *******
Subject: You have a message from Dr. Pat Bosco
Dear mamsmith@k-state.edu,
  You have received a secure message from Dr. Pat, View Message [https://patriciamoncayo.com/signin.k-state.edu.html] now.
Regards,
Dr. Pat Bosco, Vice President for Student Life/Dean of Students
Kansas State University.

Phishing Scam – 02/22/17 – Matt sent a document to you

The URL is blocked at the border and sent to Trend.

From: Matt via Dropbox [mailto:matt.dittrich@yale.edu]
Sent: Wednesday, February 22, 2017 3:52 PM
To: You <matt.dittrich@yale.edu>
Subject: Matt sent a document to you

Matt has shared a document (Scanned Receipt.pdf) with you.

View Scanned Receipt <http://laughterzone101.com/http/www/dropbox/com/SSL-Review/>

Thank you!
– Drop box Team.

Phishing Scam – 02/22/2017 – New Unread Message

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Outlook Express [mailto:meher.makda@yale.edu]
Sent: Wednesday, February 22, 2017 3:37 PM
Subject: New Unread Message

Dear Member,
You have a new unread message that is marked as Highly Important.
Click here to access your new messages <http://defenderisland.com/http/www/Outlook_signin.htm>
Please Note: Internal and Secure messages can only be accessed from your school’s portal. Please click on the button above to go to your portal.