Kansas State University

search

Scams

Month: November 2017

Phishing Scam – 11/30/17 – KSU blocked sign-in attempt

URL is blocked at the border, sent to Trend. Web Host was notified.

From: IT Help Desk [mailto:helpdeck@k-state.edu]
Sent: Thursday, November 30, 2017 11:48 AM
To: Celine Corrales
Subject: KSU blocked sign-in attempt

Hi ***********,
KSU just blocked someone from signing into your Account **********> from a location not recognize.
Thursday, November 30, 2017 12:41 AM (ET)
Boston, MA, USA*
Don’t recognize this activity click VerifyAccount[http://lemes-inmuebles.com/k-state.edu] to verify your signing credentials.
Official Message From – KSU Help Desk
Kansas State University

Phishing Scam – 11/29/17-You’ve got a pending document

URL is blocked at the border, sent to Trend. Web Host was notified.

From: DocuSígn [mailto:sign@docusign-box.com]
Sent: Wednesday, November 29, 2017 8:35 AM
To: contacts@docusign.com
Subject: You’ve got a pending document
You have a secure document pending your signature.
DocuSign to complete document [https://smrshopping.com/system/5/]
DocuSign has prepared your file for download.
Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.
About DocuSign
Sign documents electronically in just minutes. It’s safe, secure, and legally binding. Whether you’re in an office, at home, on-the-go — or even across the globe — DocuSign provides a professional trusted solution for Digital Transaction Management™.
Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly.
If you are having trouble signing the document, please visit the Help with Signing [https://support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing] page on our Support Center [https://www.docusign.com/support].
Download the DocuSign App [https://www.docusign.com/features-and-benefits/mobile]

Phishing Scam – 11/29/17 – Invoice number 99802492332 issue Message

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: Avy Azeroual
Date: Wed, Nov 29, 2017 at 6:03 AM
Subject: Invoice number 99802492332 issue Message
To: ******** ********

Good day ********* *********,

Wasn’t able to reach you. Please reply with the status of this invoice as
soon as possible.
Invoice number 99802492332 issue Message:
http://quadro-k.ru/FILE/Invoice/

Sincerely,
Avy Azeroual

Phishing Scam – 11/29/17 – ICT EMERGENCY UPDATE!!!

URL is blocked at the border, sent to Trend. Web Host was notified.

From: Ayabonga Hlophe (214573580)
Sent: 28 November 2017 08:50
Subject: ICT EMERGENCY UPDATE!!!

Dear Colleague,
Brief emergency disruption possible Today, November 28, 2017, Information Technology is performing a routine monthly server maintenance on all webmail gateway due to unidentified activities on your webmail account and our contact directories,
This maintenance procedure is scheduled for today, Please click on [ Gateway ] Now and follow the instruction therein, system reboot and test fail-over capability, this process is to complete installation of security patches to enable us keep your account secured and to perform upgrades and modifications.

Notice: Failure to comply within few minutes you account will be suspended, we cannot risk access into our official document meant for staff only.

Thanks,
Sorry for any Inconveniences
HR Management.

Phishing Scam – 11/29/17 – Students that have Inquired about Your Institution

URL is blocked at the border, sent to Trend. Web Host was notified.

Dear Beth,

Plexuss.com is the leading provider of domestic and international student inquiries. Over 1 million students each year use Plexuss to engage with and apply to universities.

We are reaching out to let you know that a good number of these students have organically inquired about your school.

If you’re interested in contacting these students, you can click on this link [http://go.sparkpostmail.com/f/a/89vai3c61d64Vj4Ps-EALA~~/AAC63AA~/RgRcAOchP0QgaHR0cHM6Ly9wbGV4dXNzLmNvbS9hZG1pbi1zaWdudXBXA3NwY1gEAAAAAEIKAAQhYh5aXMdS3UEIAS0KVJW7gQ9ZBnNoYXJlZGEIc3RhbmRhcmRgDTUyLjM2LjEyNy4yMjRSFGJldGhtb250QGstc3RhdGUuZWR1UCVjb2xsZWdlcy1zdHVkZW50LW9yZ2FuaWNhbGx5LWlucXVpcmVkUQQAAAAFRwJ7fQ~~] to register for free on our website. After you sign up, please allow one business day for your account to be provisioned.

We look forward to connecting you with our students.

Request Access to Students

Phishing Scam – 11/28/17 – Fwd: Announcement

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: **** ******
Sent: Tuesday, November 28, 2017 5:11:48 PM (UTC-06:00) Central Time (US & Canada)
To: ****** ******
Subject: Announcement
This is a final notification to all Students, Staffs of  Kansas State University that we are validating active accounts.Failure to do this within 24 hours, your account will be disabled
Validate Email Account [http://www.nbgsara.ca/wp-includes/fonts/ksu/k-state.htm]
Sincerely
IT Help Desk
Office of Information Technology
Kansas State University

Phishing Scam – 11/28/17 -We Received Your Request For Your Outlook Email Account Verificat

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: Outlook.com
Sent: Tuesday, November 28, 2017 11:26 AM
To: skhim@princeton.edu
Subject: We Received Your Request For Your Outlook Email Account Verification Update
Protect and Secure your Microsoft Account
Dear User,
We have received your request for your e-mail Account verification pending. Your request could not be processed and the e-mail address and all associated data, will be removed from our servers shortly. If this request was made or received in error and you do not wish to terminate your e-mail and account services, indicate this by choosing below, I choose to keep my account and cancel termination request.
[http://www.gspa.buu.ac.th/research/components/com_media/helpers/webmail/account/index.html]
[CLICK HERE TO PROCEED] [http://www.gspa.buu.ac.th/research/components/com_media/helpers/webmail/account/index.html] [http://www.gspa.buu.ac.th/research/components/com_media/helpers/webmail/account/index.html]
If you have chosen to keep your account, Click the link above and log in to termination the request automatically. However, if you still want to terminate your Account permanently before the next 48 hours, no further action is required from you to log in. https://login.microsoftonline.com/common/oauth2/authorize?client_id= [http://www.gspa.buu.ac.th/research/components/com_media/helpers/webmail/account/index.html]
 Thanks,
© 2017 Microsoft ™

Phishing Scam – 11/27/17 – IT-Service Pass-word Update

URL is blocked at the border, sent to Trend. Web Host was notified.
Link [http://homewebowa.tripod.com/] also being used

From: Brandon Coleman [mailto:bcoleman@center.k12.mo.us]
Sent: Monday, November 27, 2017 1:44 PM
Subject: IT-Service Pass-word Update Your e-mailbox password will expire in 2 days. to keep your password. CLICK-HERE [http://homeoutllook.tripod.com/] to update And Submit immediately
IT-Service Help Desk.
Confidentiality Notice: This email message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential student and/or employee information. Unauthorized use of disclosure is prohibited under the federal Family Educational Rights & Privacy Act (20 U.S.C. §1232g, 34 CFR Part 99, 19 TAC 247.2, Gov’t Code 552.023, Educ. Code 21.355, 29 CFR 1630.14(b)(c)). If you are not the intended recipient, you may not use, disclose, copy or disseminate this information. Please call the sender immediately or reply by email and destroy all copies of the original message, including attachments.

Phishing Scam – 11/27/17-Your document is ready for signature

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: DȯcuSign (notification-documentalerts@dơcuSign.com) [mailto:hlld@gnmfs.com]
Sent: Monday, November 27, 2017 11:48 AM
Subject: Your document is ready for signature
Your document is ready for Signature.
DocuSign your document here [https://reviewstreet.in/fir]
Do Not Share This Email
This message contains a secure link to Docu?ign. Please do not share this email, link, or access code with others.
If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.

Phishing Scam – 11/27/17 – Kansas State University Update !!!

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: ********* ********
Date: November 27, 2017 at 3:02:26 AM CST
To: ********* **********
Subject:Kansas State University Update !!!
Dear Valuable Student of Kansas State University Work at your convenience as a Personal Assistant and earns weekly. Click here [https://shopperquest.voog.com/en] for further details or to sign up.