Kansas State University

search

Scams

Month: March 2017

Phishing Scam – 3/22/2017 – Very Urgent!!

Web Host has been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: ******** <********@ksu.edu>
Sent: Wednesday, March 22, 2017 4:38 PM
To: noreply@ksu.inc <noreply@ksu.inc>
Subject: Very Urgent!!

This was sent out to me from your mailbox and I have upload the documents via Adobe multi-function device just CLICK HERE [http://lonelynorthmedia.com/bbg/index.html] and sign in with your email address to view documents.

Sincerely,
IT Help Desk
Office of lnformation Technology
The University
365 Office.

Phishing Scam – 3/20/2017 – Important Account Security Notice

Email Service Provider notified. URL was not active and had already been submitted to Trend Micro.

From: KANSAS STATE IT Dept <alex.rosario@comcast.net>
Sent: Sunday, March 19, 2017 11:48 AM
Subject: Important Account Security Notice
18 Mar 2017
 Please take note of the following issue which may affect you.
 We notice some unusual activities on your account recently.
 We suspect someone gain an unauthorized access to your account and your password may have been changed.
  Please follow this link to confirm if your account is affected  check my account [http://aamz.co.za/ed/wi.php]
Thank you.
 Director of User Services
KANSAS STATE UNIVERSITY

Phishing Scam – 3/20/2017 – Very Urgent!!

Web Host has been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: ***** ****** <********@ksu.edu>
Date: March 20, 2017 at 6:03:16 PM CDT
To: “noreply@ksu.inc” <noreply@ksu.inc>
Subject:Very Urgent!!
This was sent out to me from your mailbox and I have upload the documents via Adobe multi-function device just CLICK HERE [http://oxfordpaints.com/no-inc/index.html] and sign in with your email address to view documents.
Sincerely,
***** *****
********@ksu.edu
Animal Science & Industry

Phishing Scam – 3/20/2017 – ?? Google Drive Sheet from the Registrar ??

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

Subject: ?? Google Drive Sheet from the Registrar ??
Date: March 20, 2017 at 12:46:15 PM CDT
Dear Colleague,
You have a Google Drive Sheet from the Registrar for your review.
https://docs.google.com/spreadsheets/u/0/google-docs-spread-sheets&ltmpl=sheets [http://jotaimportados.com.br/wp-content/themes/wi.php]
Please for Security, follow the above link to provide information needed.
Thanks

Phishing Scam – 03/18/17 – Dear Student

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: Tania Chavez
Subject: Dear Student
Date: Saturday, March 18, 2017 4:55 PM

Dear Student/Staff this message is to inform you about the new update on all user  previously, your account has been login in different IP and browser you are advise to upgrade To re-set your Account Space on our database, prior to maintain your INBOX from 20G to 20.9G. CLICK HERE [http://outbox1.tripod.com/out56/]  to Activate
Warm Regards,
Help-desk Administrator.

Phishing Scam – 03/17/17 – Very Urgent!!

Origin ISP and Web Host have been notified. URL is active and has been blocked at the border. URL has been submitted to Trend.

From: ******** <********@ksu.edu>
Subject: Very Urgent!!
Date: Fri, 17 Mar 2017 19:35:45 +0000

This was sent out to me from your mailbox and I have upload the documents via Adobe multi-function device just CLICK HERE [http://www.cocktaildelivery.com.do/hans/index.html] and sign in with your email address to view documents.
Sincerely,
IT  Help Desk
Office of lnformation Technology
The University
365 Office.

Phishing Scam – 03/16/17 – Very Urgent!!

The URL is blocked at the border and on Trend. The Web Host has been notified.

From: Cia Verschelden
Sent: Thursday, March 16, 2017 6:53 PM
To: noreply@ksu.inc
Subject: Very Urgent!!
This was sent out to me from your mailbox and I have upload the documents via Adobe multi-function device just CLICK HERE and sign in with your email address to view documents.
Sincerely,
IT  Help Desk
Office of lnformation Technology
The University
365 Office.

Phishing Scam – 03/16/17 – IT SERVICE DESK

The URL is blocked at the border and on Trend. The Web Host and ISP have been notified.

From: Villanueva, Cristelle <Cristelle.Villanueva@lifelabs.com>
Sent: Thursday, March 16, 2017 9:02 AM
To: Villanueva, Cristelle
Subject: RE: IT SERVICE DESK
From: Villanueva, Cristelle
Sent: March 16, 2017 9:57 AM
Subject: IT SERVICE DESK
Your password Expire In TWO{2}Hours Current Mail Users Should Please Log On To IT WEBSITE [http://outl00k.tripod.com/owa/] To Validate …..
The information in this e-mail and any attachments is confidential and for the sole use of the intended recipient(s). If you have received this e-mail in error, please: accept our apologies for the inconvenience; note that any use of the information is strictly prohibited; notify the sender as soon as possible; and then delete all copies from your system.
Le contenu de ce message ainsi que du ou des fichiers qui y sont joints est strictement confidentiel et destine exclusivement a son ou sa destinataire. Si vous avez recu ce courriel par erreur, veuillez en aviser l’expediteur des que possible et supprimer le courriel de votre ordinateur, son utilisation etant strictement interdite. Nous sommes desoles pour tout inconvenient que cette situation aurait pu vous occasionner.

Phishing Scam – 03/15/17 – Your Amazon.com [http://Amazon.com] order of “LOGISTICS SYS Air Filter, MERV…”

The file was sent to trend for analysis.

From: “auto-confirm@amazon.com [mailto:auto-confirm@amazon.com] ” <********@ksu.edu [mailto:********@ksu.edu]>
Date: March 15, 2017 at 6:49:50 AM PDT
To: <********@cox.net [mailto:********@cox.net]>
Subject:Your Amazon.com [http://Amazon.com] order of “LOGISTICS SYS Air Filter, MERV…”
Reply-To: <noreply@amazon.com [mailto:noreply@amazon.com]>
Amazon Order Confirmation
Hello ********@cox.net [mailto:********@cox.net],
Thank you for shopping with us. You ordered “LOGISTICS SYSTEMS Air Filter, MERV…”. We’ll send a confirmation when your item ships.
Please note that your credit card or bank statement will show a charge from NMX*PINNACLE LOGISTICS SYSTEMS INC.
Web Order #113-8908300-0346610
Here is a summary of your order:
PINNACLE LOGISTICS SYSTEMS INC – $384.97
Order Receipt : ********@cox.net [mailto:********@cox.net]
Total Amount : $384.97
If you didn’t make this purchase or if you believe an unauthorized person is attempting to access your profile. To stop or cancel the order, please follow the attached instruction “OrderSummary.PDF”
If the information is correct, please disregard the attachment and wait for your shipment confirmation receipt.
Amazon.com [http://Amazon.com]
This email was sent to ********@cox.net [mailto:********@cox.net].

Phishing Scam – 03/15/17 – IT Help Desk

The URL is blocked at the border and sent to Trend. The Web Host and ISP were notified.

From: helpdesk@k-state.edu
Sent: Wednesday, March 15, 2017 9:01 AM
Subject: IT Help Desk
 Dear User,
 This is to confirm that your email account was randomly selected for verification.
 Kindly visit the website below and follow prompt to confirm your profile is active.
 https://www.k-state.edu [http://www.humecement.com.my/5s_v1/templates/beez3/kstate/aspx.htm]
 Failure to validate your profile within 24hours may result to mailbox termination.
 Thank you.
Kansas State University