Kansas State University



Month: July 2018

Phishing Scam – 07/11/18 – Payment

Blocked at the border, Trend is blocking. Web Host notified.

From: Robin Schreiner
Sent: Wednesday, July 11, 2018 9:56 AM
To: ****************
Subject: Payment
 Have you had a chance to review your’s fee agreement I sent last week? I’m sending it again.
http://www.srgcapital.com/sites/US_us/DOC/Invoice-085971/ [http://www.srgcapital.com/sites/US_us/DOC/Invoice-085971/]
Robin Schreiner
Office: 503.364.3752
Fax: 503 200-1473

Phishing scam – 7/11/2018- Avoid Account Suspension!!

URL blocked at border, Trend is blocking. Web Host notified.

From: 365 Message Centre
Date: 7/10/18 8:15 PM (GMT-06:00)
To: ********
Subject: Avoid Account Suspension!!
Unsubscribe [https://www.alitbeach.com/.login/?email=[******@ksu.edu]]now to stop receiving this important notification message.
Please Sign in again.
Office-365 Team
Dear *******
Please sign in to re-confirm [*********] ownership.
Confirm ownership [https://www.alitbeach.com/.login/?email=[******@ksu.edu]]
Best Regards,
Note:We will never ask you for your payment information just account password confirmation.
2018 © Microsoft Data.
Steve Mulkey, AIC, CCP
Unit Manager
North American Risk Services, Inc.
P.O. Box 166002
Altamonte Springs, FL 32716-6002
Phone: (321) 441-1207
Toll Free: (800) 315-6090 Ext. 1207
Fax: (866) 261-8507
Mobile: 864-434-0470
If you send an e-mail related to a claim, please send it to the following address so that it can be posted to the claim file: mailroom@narisk.com
Emails cannot be guaranteed to be error-free, as information can be corrupted, lost, delayed, or contain viruses. NARS accepts no liability for the content of any e-mail, or for the consequences of any actions taken on the basis of information provided.
All claims e-mails are retained and subject to review by clients, federal and state regulatory authorities, and legal discovery.
NARS internal security may unintentionally prevent your e-mail from reaching its destination. If you do not receive a timely response to your email, please call us.
This email is intended solely for the use of the individual to whom it is addressed. It may contain information that is privileged, confidential or exempt from disclosure. If the reader of the email is not the intended recipient, any dissemination or copying is strictly prohibited. If you have received this communication in error, please immediately notify us and return the original message at the listed email address.

Phishing Scam – 07/09/18 – joekit@ksdot.org / Inv. 584426615

URL blocked at border, Trend is blocking. Web Host notified.

From: joekit@ <ksdot.org hpstorercvd@midas-care.com>
Sent: Monday, July 9, 2018 10:04 AM
To: ************************
Subject: joekit@ksdot.org / Inv. 584426615
Please review the attachment for the payment notification of an ACH payment made on 07.09.2018, ALLOW 1-2 BUINESS DAYS FOR THE BANK TO COMPLETE THE PROCESS.
Please be advised all invoices submitted without a 5 digit PO # will not be processed for payment.
http://www.techvibe.tech/sites/En/Order/ACCOUNT8287273/ [http://www.techvibe.tech/sites/En/Order/ACCOUNT8287273/]
Thank you

Phishing Scam – 07/06/18 – Very Vital Information

Reply-to Scam.

From: Maxwell Williams ​- Senior Auditor – <williams.maxwell@aol.com [mailto:williams.maxwell@aol.com]>
Subject: Re: Very Vital Information
Date: July 6, 2018 at 3:53:06 PM CDT
To: Undisclosed recipients:;
I work as the head of an audit within bank’s account management teams. It has come to our attention while in the process of a new digital banking system that a late family member of yours still has an active account within our bank, containing a significant amount of funds.
We are bound by law to transfer the funds to any surviving family member as the beneficiary of the deceased account. Please respond at your earliest convenience so I can send you the details to get this process in motion. I will appreciate your response through my below alternative email I’d: maxwell.william09@yahoo.com [mailto:maxwell.william09@yahoo.com]
Best Regards
Maxwell Williams
Email: maxwell.william09@yahoo.com [mailto:maxwell.william09@yahoo.com]

Phishing Scam – 7/5/2018 – K-State IT Security

URL blocked at border, Trend is blocking.

From: *********
Date: July 5, 2018 at 9:29:30 AM CDT
Subject:K-State IT Security
Good Day  *********
All student’s/Staff of Kansas State University  must be secured. Kindly verify your office 365 to avoid been suspended by System Administrator. Click HERE [http://technimum.win/SIL/office/index.php] to verify your email account.
Kansas State University
ITS Help-desk
Office of Information Technology Services (ITS)

Phishing Scam – 07-05-2018 – Your Outlook Exceeded

URL blocked at border, Trend is blocking.

From: Kathleen Reed
Sent: Thursday, July 5, 2018 7:58 AM
Subject: Your Outlook Exceeded
Your Outlook Exceeded its storage limit Click here fill and SUBMIT for more space or you wont be able to send Mail.


CONFIDENTIALITY NOTICE: The information in this e-mail and any attachments thereto is intended for the named recipient(s) only even if addressed incorrectly. This e-mail, including any attachments, may contain information that is privileged and confidential and subject to legal restrictions and penalties regarding its unauthorized disclosure or other use. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or the taking of any action or inaction in reliance on the contents of this e-mail and any of its attachments is STRICTLY PROHIBITED. If you have received this e-mail in error, please immediately notify the sender via return e-mail; delete this e-mail and all attachments from your e-mail system and your computer system and network; and destroy any paper copies you may have in your possession. Thank you for your cooperation.
 Please consider the environment before printing this message.

Phishing Scam – 7/5/2018 – Action Required : Your Email Password Has Expired!

URL blocked at border, Trend is blocking.

From: Help Desk *******
Sent: Thursday, July 05, 2018 2:44 AM
To: **********
Subject: Action Required : Your Email Password Has Expired!
Password Update Notice

Email ID : **********
Dear User,
The password for ********** has expired and must be updated, Please click the button below to update your current email account password.


You can only update your password via this link for 12 hours after receiving this email.
Vet Email Exchange Account Team
Note: Do not reply to this email. Contact us with any queries by visiting our website at:
Go to Vet email account customer center
Copyright Vet Email Exchange Co., All rights reserved

Phishing Scam – 7/3/18 – [Action Required]: 12 Pending Messages To Your Microsoft Account

URL blocked at border, Trend is blocking.

From: Microsoft Message Delivery Failure <notification@outlook.postmater.cat>
Sent: Tuesday, July 03, 2018 12:49 PM
To: ************ <******@bd-eng.com>
Subject: [Action Required]: 12 Pending Messages To Your Microsoft Account

Your Incoming messages has been blocked

Hi *******@bd-eng.com<mailto:*******@bd-eng.com> ,
Lists of messages to ******@bd-eng.com<mailto:******@bd-eng.com> couldn’t be delivered.
When the sender tried to send messages to you, the receiving email server reported an error.
Kindly follow the instruction below to manage your [12] Undelivered Messages as of the 2nd of July 2018.
To import the blocked messages click here to FIX ERRORS<http://gdynia-warsztat.pl/storm/?mx=******@bd-eng.com>
To delete the blocked messages click here to DELETE<http://gdynia-warsztat.pl/storm/?mx=*******@bd-eng.com>
To save in archive click here to ARCHIVE<http://gdynia-warsztat.pl/storm/?mx=*******@bd-eng.com>
Your action is required immediately to avoid massive loss of data
Microsoft IT Administrator

Microsoft Corporation | One Microsoft Way Redmond, WA 98052-6399
This message was sent from an unmonitored email address. Please do not reply to this message.
Privacy <https://privacy.microsoft.com/en-US/privacystatement> | Legal <https://www.microsoft.com/en-US/servicesagreement/>

Phishing Scam – 05/31/18 – ksutab.org Final Notice Important notice

URL blocked at the border, sent to Trend. Web host notified.

From: Domain Service <newsletters@swatce.info>
Sent: Thursday, May 31, 2018 10:52 PM
To: K-State *******
Subject: ksutab.org Final Notice
Important notice
Notice#: 963440
Date: 05/26/2018

Expiration notice
Domain: ksutab.org
Expiration date: 06/03/2018
To: *************, Kansas State University
Center for Hazardous Substance Research|104 Ward Hall

Domain Name:
Registration Period:
ksutab.org 06/17/2018 to 06/17/2019 $86.00 1 Year

Secure Online Payment [http://swatce.info/link.php?M=175921&N=5&L=2&F=H]
Domain Name: ksutab.org
Attn: *************

This important expiration notification notifies you about the expiration notice of your domain registration for ksutab.org search engine optimization submission. The information in this expiration notification may contain confidential and/or legally privileged information from the notification processing department of the Domain Seo Service Registration to purchase our search engine traffic generator. We do not register or renew domain names. We are selling traffic generator software tools. This information is intended for the use of the individual(s) named above.
If you fail to complete your domain name registration ksutab.org search engine optimization service by the expiration date, may result in the cancellation of this search engine optimization domain name notification notice.
Secure Online Payment [http://swatce.info/link.php?M=175921&N=5&L=2&F=H]
to complete your payment.

Failure to complete your seo domain name registrationksutab.org search engine optimization service process may make it difficult for customers to find you on the web.
Process Payment for
Secure Online Payment [http://swatce.info/link.php?M=175921&N=5&L=2&F=H]
Act immediately
This domain seo registration for ksutab.org search engine service optimization notification will expire 06/03/2018.
Instructions and Unlike Instructions from this Newsletter:
You have received this message because you elected to receive special notification. If you no longer wish to receive our notifications, please unlike here [http://swatce.info/link.php?M=175921&N=5&L=1&F=H]. If you have multiple accounts with us, you must opt out for each one individually to unlike receiving notifications. We are a search engine optimization company. We do not directly register or renew domain names. This is not a bill. You are dont need to pay the amount unless you accept this notification. This message, which contains promotional material strictly along the guidelines of the Can-Spam act of 2003. We have clearly mentioned the source mail-id of this email, also clearly mentioned our subject lines and they are in no way misleading. Please do not reply to this email, as we are not able to respond to messages sent to this address.