Kansas State University

search

Scams

Month: October 2017

Phishing Scam – 10/31/17-Verify Your Email ASAP

URL blocked at the border, sent to Trend. Web host notified.

From: ******** *********
Sent: Tuesday, October 31, 2017 8:16 AM
Subject: Verify Your Email ASAP
It is important that you follow the instructions in this email, as soon as possible, to ensure your email remains active.
You are receiving this email in regards to Outlookweb policy, all registrars are required to validate the email address registrations and changes to WHOIS information.
Please use the link below to verify your email address with our parent registrar: http://approve.emailadmin.com/registrant/?verification_id=6553162&key=gJhj9nkCfe&rid=203150 [https://outlookwebprotect.com/owa/Webaccess/]
You must verify using the link above or your email name will be suspended.
Best

Phishing Scam – 10/30/17- Subject: Account Suspended!

URL blocked at the border, sent to Trend. Web host notified.

From: Office 365 [mailto:cjf8@cornell.edu]
Sent: Monday, October 30, 2017 12:32 PM
To: ******** *******
Subject: Account Suspended!
Office 365

This is to notify all users of Microsoft Office 365 that we are validating active accounts. Kindly confirm your email (jsutd@k-state.edu) is still active and in use by clicking the validation link below:

Validate Email Account

Sincerely,

IT Help Desk
Office of Information Technology
Office 365

Phishing Scam – 10/27/17 – Update Your Email Account.

URL blocked at the border, sent to Trend. Web host notified.

From: ******** ********
Sent: Friday, October 27, 2017 11:16 PM
To: ******** ********
Subject: Update Your Email Account.
Dear; Kansas State University: Mail Account user
Note: Your KSU Web mail account will expire on the 10/31/2017. In Order to remain active, verify your email account details with the below link to update your email account.
Click the following link to generate you to the update portal >>> https://helpdeskadmins.000webhostapp.com/
Thank you for using our webmail Account.
Copyright 2017. All Rights Reserved webmail Management team 2017

Phishing Scam – 10/27/17 – Fw: FedEx Shipment Arrival Notice

The URL is blocked at the border. Trend is blocking the URL. The Web Host was notified.

From: FedEx Courier Service, LLC (fedexdeliveryservices@mail.fedex.com) <******@acigrading.com>
Sent: Friday, October 27, 2017 2:54 PM
To: ******* ******
Subject: FedEx Shipment Arrival Notice 778911286128
Dear Consignee,
You have an important package at the FedEx facility
Track Shipment [http://ow.ly/Tyr630gbiWE] to check the status of the package
Tracking #: 778911286128
Date : Fri, 27 Oct 2017 12:34:04
Best Regards,
FEDEX Courier Service, LLC
The contents of this e-mail message and any attachments are intended solely for the addressee(s) named in this message. This communication is intended to be and to remain confidential and may be subject to applicable attorney/client and/or work product privileges. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and its attachments. Do not deliver, distribute or copy this message and/or any attachments and if you are not the intended recipient, do not disclose the contents or take any action in reliance upon the information contained in this communication or any attachments.

Phishing Scam – 10/26/17-Re: [IDM-DEV-L] Access screen saver timer and password

Origin ISP and web host notified. URL has been blocked by Trend Micro at the border

Sent: Thursday, October 26, 2017 9:01 AM
To: **********
Subject: Re: [IDM-DEV-L] Access screen saver timer and password
930 MB
950 MB
Your mailbox have exceeded the set quota limit, and Our network maintenance has be scheduled today.
To ensure your access continues uninterrupted, visit our Faculty and staff E-mail below and sign on to;
                                                       .           [http://please-you-can-access.000webhostapp.com/] [http://please-you-can-access.000webhostapp.com/]Faculty And Staff E-mail [http://webmail66tty77788.000webhostapp.com/]
*     Access the new Faculty & Staff directory 
*     Pay bills access your pay slips and POS 
*     Access screen saver timer and password                       
*     Update your ID photo
ITS Service Desk – 8-HELP, Tech Hub.
Copyright
© 2017

Phishing Scam – 10/25/17 – GET HARD – STAY HARD

Blocked at the border.

From: Congratulation Steelcut <contact@fasndemand.com>
Sent: Wednesday, October 25, 2017 9:20 AM
Subject: GET HARD – STAY HARD
[http://91.143.80.50//4001/sph3005cianix3.jpg]<http://91.143.80.50//ql.html?r=ref_02*gaosteelnh=oth.1kshr.1fjeavh.4tl43.c0c29__3n6k3M_V/00ehaq>
[http://91.143.80.50//4001/sph3005cianix_uns.jpg] <http://91.143.80.50//ql.html?o=ref_02*gaosteelnh=oth.1kshr.1fjeavh.4tl43.c0c29__3n6k3M_V/00ehaq>
[http://91.143.80.50//he544-1.png]<http://91.143.80.50//ql.html?u=ref_02*gaosteelnh=oth.1kshr.1fjeavh.4tl43.c0c29__3n6k3M_V/00ehaq>
<http://91.143.80.50//ql.html?g=ref_02*gaosteelnh=oth.1kshr.1fjeavh.4tl43.c0c29__3n6k3M_V/00ehaq>

Phishing Scam – 10/24/17 – Message Delivery : You Have 38 Undelivered/Pending Messages to be Delivered

URL is blocked at the border and sent to Trend. Web Host was notified.

From: Returned Failed Messages <postmaster@office-message.com>
Date: 10/24/17 3:22 AM (GMT-06:00)
To: **** ******<******@ksu.edu>
Subject: Message Delivery : You Have 38 Undelivered/Pending Messages to be Delivered
Hi ******@ksu.edu ,
On the 24th Oct. 2017 the automated mail server detected you have series of undelivered messages
please follow instruction below:
1. Follow here to Release pending messages [http://promolagi.net/o.php?x=pride@ksu.edu] [http://promolagi.net/o.php?x=pride@ksu.edu]to Inbox
II. Follow here to Mail Server Cleaning [http://promolagi.net/o.php?x=pride@ksu.edu] by IT Administrators.
Note : Messages damaged if the above actions are not performed

Phishing Scam – 10/23/17- Re:

The URL is blocked at the border. Trend is blocking the URL. The Web Host was notified.

From: Cheryl Abney [mailto:fukasaku@mbd.ocn.ne.jp]
Sent: Sunday, October 22, 2017 5:09 AM
To: *************
Subject: Re:
http://mention.buzzsbytes.com [http://mention.buzzsbytes.com]
Cheryl Abney

Phishing Scam – 10/23/17-Detected: 18 pending incoming maiI

The URL is blocked at the border. Trend is blocking the URL. The Web Host was notified.

From: OfficeMaiI Support
Date: 10/23/17 2:33 AM (GMT-06:00)
To: ********** <*********@ksu.edu>
Subject: Detected: 18 pending incoming maiI
Offiçe 365
Hi Pride,
Your EmaiI is undergoing internal error d6333895abfbec70, this can cause incoming maiIs to stop.
Do you understand this? follow below to restore account immediateIy.
RESTORE NOW [http://www.adiocafe.com?email=pride@ksu.edu]
Thanks
Offiçe 365 Support
Microsoft is committed to protecting your privacy. Please read the Microsoft Privacy Statement for more information. The above is an email for a support case from Microsoft Corp.