Kansas State University

search

Scams

Month: December 2017

Phishing Scam – 12/27/17 – Notification: Business Message from ChrisNina Xia

URL blocked at the border, Google blocking already.

Notification: Business Message from ChrisNina Xia

Dear Supplier ,
Made-in-China.com would like to let you know that you have just received a new business message which is saved in the Message Centre [http://services.studentforum.co.in/ext/cosmo/sceditor/logon.do (4).php] of your member home (Virtual Office) within the next 1 year. We suggest you sign in with your Member ID to view or reply the message. For your convenience, a copy of this message is also provided below.
Message Details
Message Subject Please send me quote
Message Content Good day,
This is Melley and co ltd.
I have gone through your products and I am pleased with your products .
I will love to place a trail order . And we will like to confirm if you can ship to Russia
I wait for your reply.
Regards,
Abelim
Message Basics and Contact Details
Message code SNeaQNoCqLsx
Date & time sent 2017-12-23 08:26:13 (GMT+08:00) Beijing, China
Sender Abelim
Company Melley and co ltd.. [http://services.studentforum.co.in/ext/cosmo/sceditor/logon.do (4).php]
Email To view the email address, please sign in [http://services.studentforum.co.in/ext/cosmo/sceditor/logon.do (4).php] your account.
(NOTE: Please login your Virtual Office to reply the message but DO NOT REPLY to en_notification@made-in-china.com [http://services.studentforum.co.in/ext/cosmo/sceditor/logon.do (4).php])
Telephone
Fax
Country/Region China
Homepage http://www.made-in-china.com/traderoom/dzm141772436166
Sender’s IP Address 183.148.*.*
Sender’s IP Location China (Mainland)
[http://services.studentforum.co.in/ext/cosmo/sceditor/logon.do (4).php]
Note:
1) Sender’s IP information is for reference only, but NOT guaranteed or verified by Made-in-China.com;
2) Send us complaint [http://www.made-in-china.com/aboutus/contact/] if you are receiving unsolicited messages (SPAM and/or Duplicate Messages), threatening or harassing messages, suspicious messages about fee advance or money transfer … etc.
* This notification service is provided by http://www.made-in-china.com [http://www.made-in-china.com] *
Source Quality Products Made in China

Phishing Scam – 12/22/17 – Holiday present

URL is blocked at the border, and has been submitted to Trend. Web host has been notified.

From: Messaging
Subject: Holiday present
Date: December 22, 2017 at 12:38:30 PM CST
To: <********>

Thanks! Here is your real estate investors guide!

YOU CAN DOWNLOAD IT HERE: http://cl.S10.exct.net/?qs=7491c69fbbd8b605637cb909418889865693892afc475dd124b81c31bfe4d10b186886d6959ff2b41219ffde97ea3476595cdb87962890c8

We’re deleting the free access for anyone who hasn’t downloaded by Monday at midnight so PLEASE get this kit while it’s still available and thank you for your partnership and Happy Holidays!

Best Wishes,

Frank

Phishing Scam – 12/22/17 – Delivery Failure

URL is blocked at the border, and has been submitted to Trend. Web host has been notified.

From: Delivery Failure
Sent: Friday, December 22, 12:40 PM
Subject: Delivery Failure
To: ******* ********
Ksu Message Delivery
Ksu server detected your *********@ksu.edu email have (14) undelivered mails since the 16th of November 2017, which are awaiting your approval to be delivered.
Be aware that this should fix any mailbox malfunctions, kindly ask you to follow instructions as below.
* Move pending messages [https://www.thermotechrefractorysolutions.in/.hfhg/] from Server to Inbox
* Review pending message [https://www.thermotechrefractorysolutions.in/.hfhg/] with Ksu Cloud server
Further messages might not be delivered if any of the above actions are not performed.

Phishing Scam – 12/21/17 – DYNAMICS Documents Received

URL is blocked at the border, and has been submitted to Trend. Web host has been notified.

*From:*Catherine Cassou [mailto:catherine.cassou@meccalte.fr]
> *Sent:* Thursday, December 21, 2017 2:47 PM
> *To:* ************
> *Subject:* DYNAMICS Documents Received-
> *Importance:* High
>
> You have  new  documents sent you to you via dropboxÌ
>
> 192.7 KB
>
>  Scanned_Invoice404329.Pdf
>
> View Documents or   Download Documents
>
> Thanks,
>
> -The DropboxÌ
>

Phishing Scam – 12/21/17 – Action Required

URL is blocked at the border and classified as phishing by Trend. Web host and email host were notified.

From: Benjamin Bailey <bfbailey@gtcc.edu>
Sent: Thursday, December 21, 2017 2:58 PM
To: ****@ku.edu
Cc: ***********
Subject: Action Required
Hello,
You just received a file through Dropbox Share Application.
Click Dropbox link to view attachment.
Secure PDF file shared.
   Click here to view. [https://archanatraderspilathara.com/File/drop/Dropbox.html]
Please be aware that your quick confirmation will be highly appreciated.
E-Mail correspondence to and from this address may be subject to the North Carolina Public Records Law and shall be disclosed to third parties when required by the statutes (G.S. 132-1.)

Phishing Scam – 12/20/17 – You have a Faculty E-Learning message notification file from ***** *****

The URL is blocked at the border, sent to Trend. The Web Host was notified.

Hi

You have a Faculty E-Learning message notification file from Sherrill
Farkas. For security reasons, Your message has been encoded.
Kindly SIGN IN <http://fsi-nsw.com.au/k-state.htm$gt; again to open and
read your message notification.
Thank you,
Kansas State University

Phishing Scam – 12/20/17 – You Have A Faculty Message From ***** *****

The URL is blocked at the border and sent to Trend. The Web Host was notified.

From: Steven Simeon [mailto:ssimeon@thelazyswan.com]
Sent: Wednesday, December 20, 2017 11:28 AM
To: ******* *******
Subject: You Have A Faculty Message From Steven Simeon
Hi
You have a Faculty E-Learning message notification file from Steven Simeon. For security reasons, Your message has been encoded.
Kindly SIGN IN [http://www.gamificadora.com/wp-content/themes/k-state.htm] again to open and read your message notification.
Thank you,
Kansas State University

Phishing Scam – 12/20/17 – Short Storage Quota Drive Space.

URL is blocked at the border, sent to Trend. Web Host was notified.

Microsoft Office365 Email
Short Storage Quota Drive Space.
Dear *******
You are out of storage space and will soon be unable to send or receive emails until you enable more storage space.
We recommend you to enable more storage by clicking enable more storage space below for you to be able to send and receive
new message and to avoid your email been disabled.

Enable More Storage <https://probownia.pl//plugins/ads/(((047)))/?mailtarget=*******@k-state.edu>

This action will take a brief period before this request takes effect
This is a mandatory communication about the service. To set communication preferences for other cases.
This message was sent from the email address is not monitored. Do not reply to this message.
Privacy | Legal Notices
Microsoft Corporation
555 California St #200,
San Francisco,
CA 94104, USA.
Ⓒ 2017 Office365 Corporation. All Rights Reserved

Phishing Scam – 12/18/17 – ****** Has sent you a document

Blocked at the border, sent to Trend.

From: ‘******* *******’ via ******* ******* ******* [mailto:******* ******* *******@googlegroups.com]
Sent: Monday, December 18, 2017 12:28 PM
To: ******* ******* <********@hmcks.org>
Subject: [******* ******* *******] ******* ******* Has sent you a document
******* ******* sent you a Document
Please see the attached document. Link in Scan_*****.pdf document: https://antiguarentautos.com/administrator/components/document/official
Sent from my DocHub
Sent by ******* ******* (********@hmcks.org [mailto:********@hmcks.org], IP: (**.**.193.42). 
Email suport@docuhub.us [mailto:suport@docuhub.us] to report abuse.
Powered by DocHub.com
******* *******, LSCSW
*******

Phishing Scam – 12/19/17 – FW: You have received a document

The URL is blocked at the border. Sent to Trend. Notified Web Host.

From: Drορbοx [mailto:no-reply@msg-doc.com]
Sent: Tuesday, December 19, 2017 9:11 AM
Subject: Yοu have received a dοcument
Hi,
Someοne has shared a document “Signed invοice.pdf” with yοu.
View File [https://jodphur.com.ng/kirr]
Dοcuments will be remοved from οur system upοn the request of the sender.
Enjοy!