Kansas State University

search

Scams

Month: August 2017

Phishing Scam-8/29/17-Notifications to all Staffs and Students.

URL submitted to Trend. Web Host was notified.
** URL http://www.audiolibre.cl//skin/ksu/k-state.htm is also being used for this scam.

From: ******** ********
Sent: Tuesday, August 29, 2017 10:16 AM
To: ********* *********
Subject: Notifications to all Staffs and Students.
This is to notify all Students, Staffs of Kansas State University that we are validating active accounts. Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account [https://www.losmoreno.ml/.well-known/pki-validation/off/offIce.php]
Sincerely IT Help Desk
Office of Information Technology
Kansas State University

Phishing Scam-8/28/17-222817011961 Dt. 18.07.2017 for 7945 ctn Huggies P-2 shipment

URL is blocked at the border and sent to Trend Micro. Web host was notified.

To: ******* ********
Subject: 222817011961 Dt. 18.07.2017 for 7945 ctn Huggies P-2 shipment
[https://amf-paris.asso.fr/wp-includes/pomo/view/view-module.php?login=gnonte@ksu.edu]
20170817170925397.xls [https://amf-paris.asso.fr/wp-includes/pomo/view/view-module.php?login=gnonte@ksu.edu] | 1 file (total 387.5 KB) VIEW [https://amf-paris.asso.fr/wp-includes/pomo/view/view-module.php?login=gnonte@ksu.edu] | DOWNLOAD [https://amf-paris.asso.fr/wp-includes/pomo/view/view-module.php?login=*******@ksu.edu]
Hello
Hope you will receive the original Documents.
Accordingly pls prepare & sign the attached documents for your bank. So that you can submit the bank document as soon as you received the original Documents.
And pls send the scanned copy document to us by email first.
For any inconvenience pls feel free to inform me.
This email has been sent from a virus-free computer protected by Avast.
www.avast.com [http://www.avast.com/]
This e-mail may contain confidential and/or privileged information. If you are not the intended recipient or have received this e-mail in error please notify the sender immediately and destroy this e-mail including all attachments and any copies. Any unauthorised use, copying, disclosure or distribution of this communication or parts thereof is strictly prohibited and may be unlawful.

Phishing Scam-8/25/17-Important Schedule message

URL is blocked at the border and sent to Trend Micro. Web host was notified.

From: Kansas State University
Subject: Important Schedule message
Date: August 25, 2017 at 12:54:21 PM CDT
To: “…”
New Page 2
You have 3 new  Important Schedule message from  Kansas State University
Log On Here to View [http://growritehydroponics.com/BHSG321/blackB/Blackboard-Learn.htm]
Kansas State University

Phishing Scam-8/24/17-[IDM-DEV-L] Emails Alert

URL is blocked at the border and sent to Trend Micro. Web host was notified.

Sent: Thursday, August 24, 2017 4:53 PM
To: idm-dev-l@listserv.ksu.edu
Subject: [IDM-DEV-L] Emails Alert
Upgrading our database and email servers to reduce spam and junk emails,we are therefore deleting all unused account to create spaces for new accounts.To prevent your account from been closed, you are required to click on the link below and sign into upgrade and backup your contact and emails automatically.
http://098765432.sitey.me/ [http://098765432.sitey.me/]
Failure to do so as the process may not be active, and you may experience some problems or errors that are not reasonable.
[https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient]
This email has been checked for viruses by Avast antivirus software.
www.avast.com [https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient]

Phishing Scam-8/24/17-Profile Alert: Contact Number Missing

URL is blocked at the border and sent to Trend Micro. Web host was notified.

From: Registrar
Sent: Thursday, August 24, 2017 7:38 PM
To: you
Subject: Profile Alert: Contact Number Missing
Profile Alert: Contact Number Missing
The contact phone number registered to this account is incorrect or missing.
You are required to provide a valid contact phone number.
Click here to proceed [http://autocueroperu.com/language/http/edu/bb.htm]
Notice: Confirming your contact phone number provides value added security for your account.

Phishing Scam-8/24/17- MAIL ALERT!

URL is blocked at the border and sent to Trend Micro. Web host was notified.

From: Allyson E. Lewis
Sent: Thursday, August 24, 2017 7:01 AM
To: Allyson E. Lewis;
Subject: MAIL ALERT!
 Your two incoming mails were placed on pending status due to the recent upgrade to our admin database,In order to receive new pending messages and other new mails CLICK HERE [http://494949339394933.my-free.website/] to login your email account to automatically fix this error, Failure to fix this error your account will be terminated. 
Outlook Web App Team
Allyson E. Lewis

Phishing Scam – 8/24/17-Attention

URL is blocked at the border and sent to Trend Micro. Web host was notified.

Sent: Thursday, August 24, 2017 4:22 AM
To: Recipients
Subject: Attention
 Dear eMail User,
Your email account is due for upgrade. Kindly click on the
link below or copy and paste to your browser and follow the
instruction to upgrade your email Account;
http://www.surveybrother.com/Technical/ffed6991205189d7b5/do [http://www.surveybrother.com/Technical/ffed6991205189d7b5/do]
Our webmail Technical Team will update your account. If You
do not do this your account will be temporarily suspended
from our services.
Warning!! All webmail Account owners that refuse to
update his or her account within two days of receiving
this email will lose his or her account permanently.
Thank you for your cooperation!
Sincere regards,
WEB MAIL ADMINISTRATOR
Copyright @2016 MAIL OFFICE All rights reserved

Phishing Scam – 08/23/17 – P.E..N.D.I.N.G!!!

URL is blocked at the border and sent to Trend Micro. Web host was notified.

** Please note this URL is also in the Incoming Mail email.
** URL https://tinyurl.com/ybao9hlj is also being used.

From: ******@KSU.EDU
Sent: Wednesday, August 23, 2017 9:32 AM
To: transactionupdateinc@mail.com
Subject: P.E..N.D.I.N.G!!!

Dear User,
Security raised concerns on your account. Your Account has been blacklisted under the Mail
terms and needs to be Validated to avoid termination. Kindly resolve this issue by following the link below.
Resolve Here <https://tinyurl.com/ybao9hlj>
Thanks,
Kansas System Administrator Team 2017

Phishing Scam – 8/23/17 – Notifications to all Staffs and Students.

Both URL’s are blocked at the border, and sent to Trend. The Web Hosts have been notified.

** Please note we have also seen this scam with the URL: https://www.losmoreno.ml/.well-known/pki-validation/ksu/k-state.htm

From: ******** ********
Sent: Wednesday, August 23, 2017 8:29 AM
To: ******* ********
Subject: Notifications to all Staffs and Students.
This is to notify all Students, Staffs of Kansas State University that we are validating active accounts. Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account [http://www.algotherm.lt/js/flash/ksu/k-state.htm]
Sincerely IT Help Desk
Office of Information Technology
Kansas State University

Phishing Scam-8/22/17-Important:Notice

The URL is blocked at the border, sent to Trend. The Web Host was notified.

From: HRIS Developers [mailto:HRIS-DEV-L@LISTSERV.KSU.EDU] On Behalf Of no-reply
Sent: Tuesday, August 22, 2017 11:16 PM
To: ******** ********
Subject: Important:Notice
Dear User, 
Your E-mailbox password will soon expire. To keep your password active. Click Here [http://beam.to/k-state-bxc] to update
Technical Support team
©2017  Administrator. All rights reserved.