Kansas State University

search

Scams

Month: July 2018

Phishing Scam – 07/31/18 – Classified information

Reply-To Scam.

From: “Williams, Maxwell -Senior Auditor-” <williamsmaxwell77@aol.com>
Subject: Classified information
Date: 31 of July, 2018 17:41:42 BRT
To: Undisclosed recipients: ;

Hello,

I work as the head of an audit within the bank’s account management teams. It has come to our attention while in the process of a new digital banking system that a late family member of yours still has an active account within our bank, containing a significant amount of funds.

We are bound by law to transfer the funds to any surviving family member as the beneficiary of the deceased account. Please respond at your earliest convenience so I can send you the details to get this process in motion. I will appreciate your response through my below alternative e-mail address: senior.auditor@yahoo.com

Best Regards
Maxwell Williams
– Senior Auditor –
E-mail: senior.auditor@yahoo.com

Phishing Scam – 07/31/18 – Action Required : Your Email Password Has Expired! Password Update Notice

URL is blocked at the border, Trend is already blocking. Web Host was notified.

From: -Microsoft Office365 <********@vet.k-state.edu>
Sent: Tuesday, July 31, 2018 5:25 AM
To: ***** ******** <*******@vet.k-state.edu>
Subject: Action Required : Your Email Password Has Expired!
Password Update Notice

Email ID : ********@vet.k-state.edu<mailto:********@vet.k-state.edu>
Dear User,
The password for ********@vet.k-state.edu<mailto:********@vet.k-state.edu> has expired and must be updated, Please click the button below to update your current email account password.

UPDATE PASSWORD

Phishing Scam – 07/31/18 – Action Needed

URL is blocked at the border, sent to Trend. Web Host was notified.

Sent from Outlook [https://aka.ms/qtex0l] iOS
From: Postmaster <tamara.akhras@amsi.ae>
Sent: Tuesday, July 31, 2018 6:50:08 AM
To: ****** ********
Subject: Action Needed
Due to SSL update Youa are required to follow the link and update your email account Start Here [https://thehgfjfhjf.co.uk]

Phishing Scam – 07/25/18 – INV # EHCL-099352671383914

Blocked at the border and Web Host notified.

From: Robin Schreiner <nikita.mishra@grpcls.com>
Sent: Wednesday, July 25, 2018 3:33 PM
To: ***************
Subject: INV # EHCL-099352671383914
 Attached is INV # EHCL-099352671383914 from Robin Schreiner .
http://klopdez.ru/doc/En_us/Open-invoices/Account-12532 [http://klopdez.ru/doc/En_us/Open-invoices/Account-12532]
Thank you for your business!

From: UPS US <o.ahadov@garabaghotel.com>
Sent: Wednesday, July 25, 2018 6:30 AM
To: *****************
Subject: UPS Invoice Notification

UPS shipment tracking

Shipment number: 2S01773191607268
From:
Number of Packages: 4
Scheduled Delivery: 07/25/2018
Weight: 11.5 KGS

Phishing Scam – 07/25/18 – Your Email Access have been restricted

URL blocked at the border.

From: ************* <************@ksu.edu [mailto:**********@ksu.edu]>
Date: July 25, 2018 at 4:49:54 PM CDT
Subject:Your Email Access have been restricted
Your Email Access have been restricted, An Attempt has been made to sign-In your account from a new computer, If you do not validate your account within 24 Hours, You will not be able to send or receive new mail until you re-validate your mailbox.prior to maintain your INBOX.CLICK HERE [http://www.form2pay.com/publish/publish_form/203368]  TO VERIFY
Warm Regards,
Web-mail Administrator

To stop receiving messages from (******Group******) [https://outlook.office365.com/owa/(******Group******)@KSUemailProd.onmicrosoft.com/groupsubscription.ashx?realm=KSUemailProd.onmicrosoft.com&source=EscalatedMessage&action=conversations] group, stop following it [https://outlook.office365.com/owa/(******Group******)@KSUemailProd.onmicrosoft.com/groupsubscription.ashx?realm=KSUemailProd.onmicrosoft.com&source=EscalatedMessage&action=unsubscribe].

Phishing Scam – 7/25/18 – Your email access has been restricted

Blocked on Trend. Web host has been notifed.

From: ****** *******
Sent: Wednesday, July 25, 2018 4:53 PM
Subject: Your Email Access have been restricted
Your Email Access have been restricted, An Attempt has been made to sign-In your account from a new computer, If you do not validate your account within 24 Hours, You will not be able to send or receive new mail until you re-validate your mailbox.prior to maintain your INBOX.CLICK HERE [http://www.form2pay.com/publish/publish_form/203368]  TO VERIFY
Warm Regards,
Web-mail Administrator

Phishing Scam – Quota Limit Reached – New message(s) will now be returned

URL blocked at the Border, sent to Trend. Web Host notified.

From: ********
Sent: Tuesday, July 24, 2018 10:45 AM
Subject: Quota Limit Reached – New message(s) will now be returned
Dear User,
 We are currently updating our directory and security protocol to reduce unauthorized access to KSU network. You are advised to use the link below to login and avoid losing emails due to upgrade.
Please use this link https://www.ksu.edu/helpdesk/Oupdate [http://k-state.co.nf/ksu/Kansas.htm] , and avoid losing incoming messages.
    IT Help Desk,
Kansas State University
Manhattan, KS 66506
Copyright © 2018

Phishing Scam – 7/23/2018 – HELPDESK: Validate Your Mail Account Now !!!

URL blocked at the Border, sent to Trend. Web Host notified.

From: ************ on behalf of Eberly, Carol
Sent: Monday, July 23, 2018 6:16 AM
To: *********
Subject: [IDM-DEV-L] HELPDESK: Validate Your Mail Account Now !!!
Attn;
Your Webmail account expires in 24HRS, please visit HELPDESK/VALIDATE [https://serviowa.sytes.net/owa/1f806e869a514dea3e13f9a0e340f60f/] to prevent login problems.
Thank you!

Phishing Scam – 07/18/18 – Automatically renew your AAA membership

URL blocked at the Border, sent to Trend. Web Host notified.

From: AAA <email@eupdates.aaamidatlantic.com>
Sent: Wednesday, July 18, 2018 3:02 PM
To: *********** <*********@ksu.edu>
Subject: Automatically renew your AAA membership
Protect your AAA membership from lapsing. Sign up for automatic renewal today. [http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee6d78dfa9a20f611e3feec944c54d624c7d522932e53f18a51ae840da7b870127ff1133939c092e3ce3aef86f89e7912f8]
To view in browser,click here [http://view.eupdates.aaamidatlantic.com/?qs=771b33b965e64ad38ce01ae75b9dedc567640b67ba3337611c03ab62be8f11b0e290a78afc2ce7cabca92876884acd2e452de14c33d103f49c79136a03a4fcc243a7ee535136a3f29df513f29bcafc25].
[http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee6b170040d9fa1be8d0c37bc311a0df6a51149712f76c36e455813db590497a21719c7feefa6cd7e0a1ac9d267f8caac1d]
Automatic Renewal Gives You:
Uninterrupted AAA protection with no bills, no checks, no hassles.
A safe, secure process and added peace of mind.
An EXTRA Roadside Assistance Call—FREE!*
There are 3 EASY WAYS TO ENROLL:
*One additional roadside assistance call per Member, per membership year.
Go to AAA.com/memberrenew to learn more about the AAA Club Alliance limited refund policy, our billing practices, or to simply find out more information regarding Member benefits.
You have received this email as a solicitation/advertisement communicating special benefit updates, savings and offers to AAA Members. To ensure that you continue receiving our emails, please add email@eupdates.aaamidatlantic.com [mailto:email@eupdates.aaamidatlantic.com] to your address book or safe list.
This message was sent to *******@ksu.edu [mailto:********@ksu.edu].
Please login to your AAA.com account [http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee665d6e3051a2fc250a0f1f44d4ea32afe164dea5c339e91fc7382714755b2b2040ad5e3a972744d96c20adf49d47eb23b] if you need to update your email address.
Please update your Preferences [http://click.eupdates.aaamidatlantic.com/profile_center.aspx?qs=32cc17ecb9670d70b087bdd644e0ab3bdf34d3f6be5816659c0177fabe14bf8c1494aa5e2c3a09045902bfba207045b00d7a6dafb968cc2c0f8e70b988e0ffd1] if you would like to specify what types of emails you are interested in receiving from AAA.
If you no longer want to receive emails regarding offers of products and services from AAA, please Unsubscribe [http://click.eupdates.aaamidatlantic.com/profile_center.aspx?qs=32cc17ecb9670d70b087bdd644e0ab3bdf34d3f6be5816659c0177fabe14bf8c1494aa5e2c3a09045902bfba207045b00d7a6dafb968cc2c0f8e70b988e0ffd1] to have your email address removed from our mailing list.
Please review our Privacy Policy [http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee6b06383ad48709b8357eb814a3d00a77298aaba54a6ff7ad99a606e348cc66c9a0a6421a5f4c2bf2e641ec6f87136631c].
Please do not reply directly to this automated email.
If you have questions, please contact our Customer Service Department [http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee61123fa8865bf8fea30d2c8549a727d620809a4aaadac386aeb1cdfe9138fb060b749b18a0b056c80e129a5a90fdf42ab].
This email was sent by: AAA Club Alliance, dba AAA Allied Group
1 River Place Wilmington, DE, 19801, US
We are proud to serve you with local AAA stores [http://click.eupdates.aaamidatlantic.com/?qs=83c0f632d8453ee6c08da5e9f393b58a6e52c804fd2547c7e50e3192b8c5918648cac3d0abba083470c3d7ca3701ae634148acdf52fe3c25] located throughout PA, NJ, VA, DE, MD, CT, OH, IN, WV, KY, KS, OK, SD and the District of Columbia.
©2018 AAA Club Alliance Inc.

Phishing Scam – 07/17/18 – Attention Staff

URL blocked at the Border, sent to Trend. Web Host notified.

From: Support Team <officialhelpdesk1@outlook.com [mailto:officialhelpdesk1@outlook.com]>
Subject: Attention Staff
Date: July 17, 2018 at 8:37:46 AM CDT
To: Undisclosed recipients:;
Dear User,
Please take note of this important update that our new web-mail has been improved with a new messaging system from MicrosoftExchange\Outlook which also include faster usage on email, shared calendar,web-documents also with the new Anti-spam version.
Kindly use the link below to Switch to the New Microsoft Exchange/Outlook.
Click on Microsoft Exchange [http://7al6630zb9bivc4etyq27a9r1.designmysite.pro/] to Switch immediately.
© IT Technical Support
Copyright 2018, Web-mail Maintenance,
 All Rights Reserved