Kansas State University

search

Scams

Month: January 2018

Phishing Scam – 01/27/18 – Urgent Attention Required: Account Closure Notice

The URL is blocked at the border and already blocked by Trend. The Web Host was notified.

From: Administrator <susie@alimice.com>
Sent: Saturday, January 27, 2018 2:23 PM
To: noreply@fice365.com
Subject: Urgent Attention Required: Account Closure Notice.
Important Note: This is a service message with information related to your mailbox account.
Dear User,
This is Office Administrator. In order to enhace all mail users email security we are requesting that your revalidate your mail account immediately to keep your account valid and up to date with Web Mail Server.
In order to revalidate your account please click on
REVALIDATE MY ACCOUNT FREE. [http://www.tac-ltd.com/office/login/index.php]
NOTE: Please update your account within 24 – 72 hours to avoid permanent deactiation of your mailbox from Web Server.
Sincerely, 
Administrator.

Phishing Scam – 1/26/2018 -Urgent Message

URL is blocked at the border, sent to Trend. Web host was notified.

From: *********
Sent: Thursday, January 25, 2018 5:09 PM
To: **********
Subject: Urgent Message
This is to notify all students and staffs of Kansas State University that we are validating active accounts. Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account [http://sinfoniadeagua.com/kcfinder/upload/files/index.htm]
Sincerely IT Help Desk
Office of Information Technology
Kansas State University
You’re receiving this message because you’re a member of the ADM [https://outlook.office365.com/owa/admin@ksuemailprod.onmicrosoft.com/groupsubscription.ashx?realm=ksuemailprod.onmicrosoft.com&source=EscalatedMessage&action=conversations] group. If you don’t want to receive any messages or events from this group, stop following it in your inbox [https://outlook.office365.com/owa/admin@ksuemailprod.onmicrosoft.com/groupsubscription.ashx?realm=ksuemailprod.onmicrosoft.com&source=EscalatedMessage&action=unsubscribe].
View group conversations [https://outlook.office365.com/owa/admin@ksuemailprod.onmicrosoft.com/groupsubscription.ashx?realm=ksuemailprod.onmicrosoft.com&source=EscalatedMessage&action=conversations]   |   View group files [https://outlook.office365.com/owa/admin@ksuemailprod.onmicrosoft.com/groupsubscription.ashx?realm=ksuemailprod.onmicrosoft.com&source=EscalatedMessage&action=files]

Correspondence from the Office of Student Life

URL is blocked at the border, sent to Trend. Web host was notified.

From: Office of Student Life (via Maxient)
Sent: Thursday, January 25, 5:05 PM
Subject: Correspondence from the Office of Student Life
To: ********* *********
A letter has been issued to you electronically by the Office of Student Life. Upon clicking the link below, you will be taken to a screen displaying your name and requesting an access code to ensure confidentiality. Confirm that your name appears on the screen, and then enter your student ID number as the access code.
Your letter will appear in PDF format and should be printed or saved for your records. It will remain accessible through this link for 30 days. If the letter fails to appear, you may need to use a different computer or install the free Adobe Acrobat Reader.
If you continue to experience difficulty accessing your letter or wish to confirm the legitimacy of this message, please contact our office at 785-532-6432.
THIS IS AN OFFICIAL CORRESPONDENCE FROM THE OFFICE OF STUDENT LIFE AT KANSAS STATE UNIVERSITY
[https://cm.maxient.com/view.php?institution_code_public=KansasStateUniv&code=HBec4sL14tGHwkC0hJ5MAyG4aPOLWhZG] Pick up your letter
Office of Student Life
201 Holton Hall
Kansas State University
stulife@k-state.edu
785.532.6432

Phishing Scam – 01/25/18 – Urgent Message

URL blocked at the border, sent to Trend. Web host notified.

From: “******* [mailto:*******]” <******* [mailto:*******]>
Subject: Urgent Message
Date: January 25, 2018 at 17:27:10 CST
To: ******* [mailto:*******]
This is to notify all students and staffs of Kansas State University that we are validating active accounts. Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account [http://sinfoniadeagua.com//kcfinder/upload/files/index.htm]
 Sincerely IT Help Desk
Office of Information Technology
Kansas State University

Phishing Scam – 1/24/2018 – RE (1):

URL is blocked at the border, sent to Trend. Web host was notified.

CONFIDENTIAL This message, its content and attachments are confidential. This email communication is intended for only individuals or entities names above and access by anyone else is unauthorized. If you are not the intended recipient, you are hereby notified that dissemination, distribution, copying, electronic storage or use of this email, and any attachments thereto, is prohibited. If you have received this message in error, please immediately notify me or reply to *********@k-state.edu [**********@k-state.edu] and permanently delete this message and any copies immediately. Thank you.
From: mcdon6mch [mailto:mcdon6mch@poczta.duna.pl]
Sent: Wednesday, January 24, 2018 4:23 PM
To: ********** <*********@ksu.edu>
Subject: RE (1):
http://bit.ly/2E3nGx9 [http://bit.ly/2E3nGx9]
🙂

Phishing Scam – 01/24/2018-ATTACHED 2017 W2 ENCLOSED

URL is blocked at the border, sent to Trend. Web host was notified.

From: Sharefile Notification [mailto:todd@mccannconstruct.com]
Sent: Wednesday, January 24, 2018 9:10 AM
Subject: ATTACHED 2017 W2 ENCLOSED
Docusign User sent you a document to review and sign.
REVIEW DOCUMENTS [https://new2.spunktek.com/business/indexdb.htm]
Coorporate Office.
Please fill all documents and sign. 
Thank you,

Phishing Scam – 01/24/2018-Mailbox Service Warning

URL is blocked at the border, sent to Trend. Web host was notified.

Hello ********,
Your account has been suspended due to mail policy violation,
CLICK HERE [http://rosemary.edu.np/wp-content/gdhsfhfskjdkjfg/dshfjkdsdalksd/index.php?email=*******@ksu.edu] to re-verify and continue usage. 
Best,
© 2018 mail All rights reserved. NMLSR ID 399801
This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged, confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.

Phishing Scam – 01/24/2018 – Invoice Delivery 09343

URL is blocked at the border, sent to Trend. Web host was notified.

From: Andrea Young [mailto:andreay@windermere.com]
Sent: Wednesday, January 24, 2018 9:32 AM
To: **********
Subject: Invoice Delivery 09343
Please advice when you will be funding this almost due Invoice, we prefer funds sent via check, let me know when payment will be
Please let us know if you have any questions.
Thank you for your business.

Phishing Scam – 1/23/2018 –

URL is blocked at the border, sent to Trend. Web host was notified.

From: Sue Hockert
Date: January 23, 2018 at 10:19:25 PM CST
To: Undisclosed recipients:;
Your e-mailbox password will expire in 2 days. to keep your password. CLICK-HERE [http://owaoutltooktttiiii.tripod.com/] to update And Submit immediately
 IT-Service Help Desk

Phishing Scam – 01/23/2018 – (1)New Documents

URL is blocked at the border, sent to Trend. Web host was notified.

From: yjsin322@daum.net
Sent: Tuesday, January 23, 2018 6:17 PM
Subject: (1)New Documents

You have a secure document via Dropbox pending your signature.
See Documents <http://www.grenier-valaisan.ch/media/hj/index.html>
Your document is ready for download.
If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.
Dropbox App