Kansas State University

search

Scams

Month: April 2018

Phishing Scam – 04/30/2018 – エンドユーザダイジェスト: 1 新規メッセージ エンドユーザダイジェスト: 1 新規メッセージ ユーザ名

Blocked at border, sent to Trend. Web host notified.

From: nobody@pp.transnet.ne.jp
Sent: Monday, April 30, 2018 4:41 PM
To: *******t <*******@ksu.edu>
Subject: エンドユーザダイジェスト: 1 新規メッセージ
エンドユーザダイジェスト: 1 新規メッセージ
ユーザ名 [translates: End user digest: 1 new message
End user digest: 1 new message
User name]:*******@ksu.edu [mailto:*******@ksu.edu]
次のメールは、エンドユーザダイジェストを最後に受信してから個人検疫フォルダに保存されました。これらは、30日後に削除されます。メールを受信箱に配信するには、リリースをクリックしてください。メールを受信箱に配信し、差出人を差出人セーフリストに登録するには、セーフリストをクリックしてください。以後、その差出人からのメールをすべて受信します。ダイジェストに含まれるスパム以外のメッセージをレポートするには、スパム以外をクリックしてください。
新しいエンドユーザダイジェストを要求 [translates: The following mail was saved in the Personal Quarantine folder after receiving the end user digest last. These will be deleted after 30 days. To deliver the mail to the inbox click on the release. To deliver the mail to the inbox, and to add the sender to the safe from the sender, please click on the safe list. After that, I will receive all the mails from that sender. To report messages other than spam included in the digest, please click anything other than spam.
Request new end user digest] [https://ppmst.transnet.ne.jp:10020/enduser/process.cgi?ts=1525124472&cmd=gendigest&locale=ja&msg_id=(V_2e3b8d7eebafe3bf4746b9f93b0d)&recipient=*******@ksu.edu&sig=0897503409957936e91dd602a62525bc314a455d1eb5e71254e91da2718de542]
検疫フォルダ
スコア
差出人
件名
日時
リリース
[translates: Quarantine folder
Score
From
subject
Date and time
release]
[https://ppmst.transnet.ne.jp:10020/enduser/process.cgi?ts=1525124472&cmd=release&locale=ja&msg_id=(V_2e3b8d7eebafe3bf4746b9f93b0dNnQrUkc2ZytFVjNOMmRaR2RuaTBOVEdCbzJXZ3Q4OVY=)&recipient=*******@ksu.edu&sig=38433943510c9de24ac78292bef69ab1caf3b8accb1cbfe97a9fdb24c942a6fd]
100
testuser@transnet.ne.jp [mailto:testuser@transnet.ne.jp]
PLEASE REPLY
2018-04-27 06:10:08
詳細は、システム管理者にお問い合わせください。[translates: For details, please contact your system administrator.]
Powered by Proofpoint Protection Server

Phishing Scam – 04/30/2018 – Job Offer (Personal Assistant)

No link. Asks user to send information through other means.

From: *******
Sent: Monday, April 30, 2018 4:02 PM
To: *******
Subject: Job Offer (Personal Assistant)
I am in need for an urgent replacement for my Personal Assistant. I really need someone urgently to take up the position as my personal assistant I am looking for a friendly, simple & trust worthy personal office assistant, You can take it as a part time job depending on your choice. The hours will be between 3 to 6 hours daily, which can be increased if you want and this will give you free time to go on with your regular job
Below are job Descriptions.
Your Duties:
*General work.
*process mails.
*Data entry.
*Receive calls/ at specific times
*Book appointments & Flight reservation.
*shopping, E.t.c or any other reasonable duty will be allocated to you.
I am an Artist and i travel a lot to do and sell art works, I also buy ideas, Artifacts, antics and materials from ancient cities and I have got so many clients as companies, individuals and governmental institutions and private museums. I have been pretty successful in my business, I get involved in several art deals in United States & Canada. I am most very often get my hands occupied, so it is imperative for me to have a worthy personal assistant. Due to the nature of my job, It requires frequent traveling so i need someone to handle my schedule when I’m not in town, Every instructions will be given to you via email and phone for now until i’m back, I travel a lot so that is the main reason why i need you to be my personal assistant and i want you to begin work immediately. As a matter of fact, I am currently on a business trip to Canada at this time.
I will prepay you in advance to do my shopping, Bill payments and have the items sent to my PO box. I will pick the items up from the post office when I return from Canada before Middle of July. How soon can you start? I will email you the list and pictures of what to shop for so you can do the shopping at Sears,Walmart, Best buy and other stores. I’ll pay you $250 for your service for 4 hours every week. I’m prepared to pay for mileage/travel expense.I will provide clear set of instructions for each task I need done and sufficient funds to cover all errands. I’d love to meet with you upon my return from Canada to discuss the possibility of making this job long term. You will be working from home. The hours are flexible so you can spread those 2- 4 hours a week on your own time. I will provide you with sufficient funds and adequate instruction for every task. I will be sending money for my errands inclusive of payment for your service through my bank channel.
I need you to get back to me with the below info:
Full_Name
Full Address (No PO BOX):
City:
State :
Zip Code :
Phone_Cell :
Gender_Age :
Email_Address:
Also include your mobile number for better means of communication.
Sincerely
*******

Phishing Scam – 4/29/18 – SUBSCRIPTION NOTICE

URL has been blocked at the border and submitted to Trend. Web host was notified

Microsoft Office
Unable to Verify Subscription.
User Abuse
Sorry, we are unable to verify your abuse@k-state.edu subscription, so most of your mailbox features have been disabled. Please re-enable now.
RE-ENABLE NOW [http://it-klinik-berlin.de/libraries/outlook.office?mailtarget=abuse@k-state.edu]
Why it happens
While you don’t need to be online at all times to use Office 365, you do need to connect to the Internet intermittently so Office 365 can verify that your subscription is still active. If Office 365 can’t check the status of your subscription for an extended period of time (usually around 30 days), you’ll see the ”Unable to Verify Subscription” message, and Office 365 will eventually disable most of your mailbox features.
Thanks,
The Microsoft Office
We hope to continue serving you.
Microsoft Corporation
One MSN Way, Redmond, WA 98052
Microsoft respects your privacy, Please read our online Privacy Statement.
This Message was sent from an unmonitored e-mail address. Please do not reply this message.

Phishing Scam – 04/24/2018 – Action required: Sync error – (6) returned mails

Blocked at the border, sent to Trend.

From: MicrosoftOfficeOutlook0365 Automated Email Protection Support Services Center
Sent: Tuesday, April 24, 2018 3:43 PM
To: *******
Subject: Action required: Sync error – (6) returned mails
At 8:15AM, your account failed to sync and (6) incoming mails were returned.
Please proceed below to retrieve pending messages to your inbox.
Retrieve pending mails [https://www.batualamraya.com/]
Email notifications by default, but you can change how you receive notifications [https://www.batualamraya.com/] if you want.
© 2018 Office Support
Terms of use Privacy & Cookies

Phishing Scam 4/24/2018 – Reset Password In Process

The URL is blocked at the border and was submitted to Trend. Web Host was notified.

From: MS Settings Setup
Sent: Tuesday, April 24, 2018 7:25 AM
To: ******* *******
Subject: Reset Password In Process
Microsoft Outlook Office365
Your New Password Request
Your password reset is in process and your current password will be disable shortly the
password reset link will be forward to the new optional email submitted
Ignore this email notification your request will take effect shortly
If you did not request this password reset
Use Cancel Request button to cancel the password reset and keep your email safe
Cancel Reset Process
This action will take a brief period before this request takes effect
This is a mandatory communication about the service. To set communication preferences
for other cases.
This message was sent from the email address is not monitored. Do not reply to this message.
Privacy | Legal Notices
Microsoft Corporation
600 Pine Street, Suite 352,
Seattle,
WA 98101, USA.

Phishing Scam – 04/23/2018 – Office Support

The URL is blocked at the border and was submitted to Trend. Web Host was notified.

Subject: Office Support
Date: Mon, 23 Apr 2018
From: Office Support <o365mc@OFFICE.EMAILSUPPORT.COM>

User Abuse

Sorry, we are unable to verify your abuse@k-state.edu subscription, so most of your mailbox features have been disabled. Please re-enable now.

RE-ENABLE NOW <http://it-klinik-berlin.de/libraries/outlook.office.com?mailtarget=abuse@k-state.edu>

Why it happens

While you don’t need to be online at all times to use Office 365, you do need to connect to the Internet intermittently so Office 365 can verify that your subscription is still active. If Office 365 can’t check the status of your subscription for an extended period of time (usually around 30 days), you’ll see the ”Unable to Verify Subscription” message, and Office 365 will eventually disable most of your mailbox features.

Thanks,
The Microsoft Office

Phishing Scam – 04/23/2018 – You have a UPS Parcel

The URL is blocked at the border and was submitted to Trend. Web Host was notified.

Subject: You have a UPS Parcel
Date: Mon, 23 Apr 2018 16:44:39 +0100
From: Package Notification
To: ********@ksu.edu

Hi _*********@ksu.edu_,
Your package is now available for delivery. Track parcel

Thank you for your business.
For additional support, please view the  UPS Billing Center User Guide.

————————————————————————
© 2018 United Parcel Service of America, Inc. UPS, the UPS brandmark,
and the color brown are trademarks of United Parcel Service of America,
Inc. All rights reserved.
For more information on UPS’s privacy practices, refer to the UPS
Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any
reply message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be
confidential. If you are not the intended recipient, the reading,
copying, disclosure or other use of the contents of this e-mail is
strictly prohibited and you are instructed to please delete this e-mail
immediately.
Privacy Policy
Contact UPS

Phishing Scam – 4/23/2018 – From IT Help Desk Team

The URL is blocked at the border and was submitted to Trend. Web Host was notified.

From: Luis Fierro
Sent: Sunday, April 22, 2018 7:05 AM
Subject: From IT Help Desk Team
We’re making a few improvements to our Web mail Log in page, aimed at giving our user’s even better security.
FOLLOW HERE >>>  http://helpdeskupdate.company.com/ [http://helpdeskupdate.company.com/]  <<< UPDATE YOUR EMAIL ACCOUNT BELOW>>> [http://helpdeskupdate.company.com/]
helpdeskupdate.company.com
UPDATE YOUR EMAIL ACCOUNT BELOW>>>

The office of Information Security will keep this updated if information should change, but we encourage all users
to run their updates after the expected release of this patch.
With kind regards,
Your IT Help desk Team
— Information Services & Technology (IS&T)
CONFIDENCIALIDAD: La información contenida en este mensaje y/o en los archivos adjuntos es de carácter confidencial o privilegiada y está destinada al uso exclusivo del emisor y/o de la persona o entidad a quien va dirigida. Si usted no es el destinatario, cualquier almacenamiento, divulgación, distribución o copia de esta información está estrictamente prohibida y será sancionado por la ley. Si recibió este mensaje por error, por favor infórmenos inmediatamente respondiendo este mismo mensaje y borre éste y todos los archivos adjuntos. Gracias.
CONFIDENTIALITY NOTE: The information contained in this email, or any attachments to it, may be confidential and/or privileged and are for the intended addressee(s) only. Any unauthorized use, retention, disclosure, distribution or copying of this e-mail, or any information it contains, is prohibited and may be sanctioned by law. If you are not the intended recipient and received this message by mistake, please reply to sender and inform us, and then delete this mail and all attachments from your computer. Thank you.

Phishing Scam – 4/23/2018 – Please validate your k-state.edu

ISP has been notified.

From: Austin Golden
Sent: Monday, April 23, 2018 2:41:36 AM
Subject: Please validate your k-state.edu
  It seems you have not received our notice.If you want to retain your k-state.edu [http://k-state.edu] account you have to respond to this notice ,there would be a removal of all account that fail to upgrade his her account within three days after receiving this notice.You are to fill out below details or your account will be suspended for security reasons.
Your k-state.edu [http://k-state.edu] Login Email:
Your k-state.edu [http://k-state.edu] Password:
Your date of birth:
Above details should be forwarded to Admin Officer’s Email: cindy.xin@dlut.edu.cn [mailto:cindy.xin@dlut.edu.cn]
Thank you.
k-state.edu [http://k-state.edu] Protection Team

Phishing Scam – 04/20/18 – Help Desk

The URL is blocked at the border, already blocked by Trend. Web Host was notified.

From: Luis Fierro [mailto:lfierro@inacap.cl]
Sent: Friday, April 20, 2018 9:37 AM
Subject: Help Desk
We’re making a few improvements to our Web mail Log in page, aimed at giving our user’s even better security.
FOLLOW HERE >>> http://webmailverify.company.com
The office of Information Security will keep this updated if information should change, but we encourage all users
to run their updates after the expected release of this patch.
With kind regards,
Your IT Help desk Team
— Information Services & Technology (IS&T)
________________________________
CONFIDENCIALIDAD: La información contenida en este mensaje y/o en los archivos adjuntos es de carácter confidencial o privilegiada y está destinada al uso exclusivo del emisor y/o de la persona o entidad a quien va dirigida. Si usted no es el destinatario, cualquier almacenamiento, divulgación, distribución o copia de esta información está estrictamente prohibida y será sancionado por la ley. Si recibió este mensaje por error, por favor infórmenos inmediatamente respondiendo este mismo mensaje y borre éste y todos los archivos adjuntos. Gracias.
CONFIDENTIALITY NOTE: The information contained in this email, or any attachments to it, may be confidential and/or privileged and are for the intended addressee(s) only. Any unauthorized use, retention, disclosure, distribution or copying of this e-mail, or any information it contains, is prohibited and may be sanctioned by law. If you are not the intended recipient and received this message by mistake, please reply to sender and inform us, and then delete this mail and all attachments from your computer. Thank you.