Kansas State University

search

Scams

Month: September 2017

Phishing Scam – 09/29/17 – KSU-Update

The Internet Service Provider was notified.

From: KSU Admin [mailto:ksu.a@consultant.com]
Sent: Friday, September 29, 2017 1:06 PM
Subject: KSU-Update
Dear Valid User,
Our Account users discovered series of illegal attempts on your mail account from different IP locations.This is for your own safety to avoid your account closed, you will have to verify your account by filling out your Log-in below by clicking the reply button. We apologies for any inconveniences.
K-State eID:
Password:
MM/dd/yyyy:
After receiving the information requested you will be able to continue using your Account.
IT Help Desk
© Kansas State University (Co. Reg.No.2344507D) All Rights Reserved. Intellectual Property Rights Policy

Phishing Scam – 09/29/17 – Important Reminder *******@ksu.edu [mailto:*******@ksu.edu]

URL is blocked at the border, sent to Trend. Web host notified.

Begin forwarded message:
From:ksu.edu [http://ksu.edu]  <wtapaha@c-a-tribes.org [mailto:wtapaha@c-a-tribes.org]>
Date: September 29, 2017 at 6:30:47 AM CDT
To: <*******@ksu.edu [mailto:*******@ksu.edu]>
Subject:Important Reminder *******@ksu.edu [mailto:*******@ksu.edu]
Hi *******,
*******@ksu.edu [mailto:*******@ksu.edu] removal from ksu.edu [http://ksu.edu] server has been approved and initiated,
Due to ignorance of last verification warning.
Removal will occur in exactly 48 hours(1 Oct 2017)  from now(28 Sep 2017)
We recommend that you do any of the below and protect your mailbox
CONTINUE REMOVAL [https://maychuquocte.com/wp-includes/js/blessed?email=*******@ksu.edu]
CANCEL REMOVAL [https://maychuquocte.com/wp-includes/js/blessed?email=*******@ksu.edu]

© 2017 ksu.edu [http://ksu.edu]
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Please do not reply this message. <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

Phishing Scam – 09/29/17 – Re: Signed Agreement 23789-FS

URL is blocked at the border, sent to Trend, web host was notified.

From: Humec Support
Sent: Friday, September 29, 2017 7:55 AM
To: Family Center
Subject: Re: Signed Agreement 23789-FS
 It’s a fake. Good one though. Vbs files are scripts, not documents. Go ahead and send this to abuse@ksu.edu [mailto:abuse@ksu.edu] to get it blocked. 
On Sep 29, 2017, at 7:48 AM, Family Center <*******@ksu.edu [mailto:*******@ksu.edu]> wrote:
Could you check to see if this is a phishing email or if it is legit? Thanks! 
From: BBAC <emma.b@bbac.aero [mailto:emma.b@bbac.aero]>
Sent: Friday, September 29, 2017 7:05 AM
Subject: Signed Agreement 23789-FS
Good day,
  Attached is the Signed Agreement as you requested, kindly advise if we can proceed with the payment.
  Signed Agreement 23789-FS.vbs [https://drive.google.com/file/d/0BxEpJAR8Z5I1Ry00WXNCdzZfZzg/view?usp=drive_web]
<39765837.png>

Phishing Scam – 9/28/17 – EMERGENCY

URL is blocked at the border and sent to Trend. The Web Host was notified.

From: **********
Sent: Thursday, September 28, 2017 6:58 PM
Subject: EMERGENCY
EMERGENCY Your Email Access have been restricted, An Attempt has been made to sign-In your account from a new computer, If you do not validate your account within 24 Hours, 
You will not be able to send or receive new mail until you re-validate your mailbox. prior to maintain your INBOX. CLICK HERE [https://www.powr.io/plugins/form-builder/view/11353269?mode=page] to re-validate. 
Warm Regards, Webmail Administrator

Phishing Scam – 09/27/17 – Fw: Pending mails.

URL is blocked at the border and sent to Trend. The Web Host was notified.

From: Online Help Desk <*******@hacoreadymix.com>
Sent: Wednesday, September 27, 2017 2:41 PM
To: *******
Subject: Pending mails.
ksu.edu Server
Dear housing
You Have 2 mails pending from ********@ ksu.edu
Click here to Process [http://unikaradio.com/lite/swf/mine/source/?email=*******@ksu.edu]
Sincerely
ksu.edu Online Help Desk

Phishing Scam – 9/27/17-Greetings

URL is blocked at the border, sent to Trend. Web host was notified.

From: ******** **********
Sent: Wednesday, September 27, 2017 12:30 PM
Subject: Greetings
Greetings,
You have a message pending from the Human Resources Department.
Click here [http://athengreel.com/g/office/] to view your message
Copyright © 

Phishing Scam – 9/27/17- VERY URGENT

URL is blocked at the border, sent to Trend. Web host was notified.

From: ******** *********
Sent: Wednesday, September 27, 2017 11:36 AM
To: ******** *********
Subject: VERY URGENT
Hello
  This is to notify, all Students and Staffs of  University that we are validating active accounts.
Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account  [http://ow.ly/O4rp30ft3Bu]

Sincerely
IT Help Desk

Phishing Scam – 09/26/17 – Urgent Mail-Box Attention Needed.

URL is blocked at the border, sent to Trend. Web host was notified.

From: Support-Team <anne.quetu@ccca-btp.fr>
Sent: Tuesday, September 26, 2017 7:09 PM
To: ***** *******
Subject: Urgent Mail-Box Attention Needed.
Dear *******@ksu.edu,
19.89MB 20GB
We noticed your e-mail account has almost exceed it’s limit. And you may not be able to send or receive messages any moment from now,
Click Here to renew your account. [https://dan.unispedlogistics.com/pro/?email=*******@ksu.edu]
NOTICE:
failure to renew your e-mail account. It will be permanently disabled.
Thanks,
Account Service

Phishing Scam – 09/22/17 – IT Service HelpDesk

URL is blocked at the border and Trend is already blocking.

Scam was also sent out on 09/27 with the subject: HelpDesk

From: Kansas State University <*******@k-state.edu>
Sent: Friday, September 22, 2017 11:50 AM
To: econ
Subject: IT Service HelpDesk
Attention ******@k-state.edu,
Please ClickHere [http://tinyurl.com/yajtm9h5] to upgrade your account for more storage.
Sincerely,
IT Service HelpDesk
Kansas State University
© 2017,IT Service HelpDesk. All Rights Reserved.

Phishing Scam – 09/24/17 – Your account will be suspended

URL is blocked at the border and submitted to Trend. Web host was notified.

From: Microsoft <gerd.reissmann@t-online.de>
Sent: Sunday, September 24, 2017 7:52 PM
To: econ
Subject: Your account will be suspended
 E-mail Upgrade
We are asking users to upgrade due to recent security incidents online.
This is for your own safety to continue using your account, click the Update now button below.
Update Nοw [http://www.joyeriabiendicho.net/wp-admin/maint/office/index.php?email=*******@k-state.edu]
To opt out or change where you receive security notifications, click here [http://ow.ly/NIxa30cGPJQ].
Nοte: Please do nοt ignore this email to avοid your account been closed
Thanks,
ADMIN MANAGER MDC Barbosa, Judith SE
The Micrοsοft account team.