Kansas State University

search

Scams

Month: March 2019

Phishing Scam – 03/19/19 – [Secure Message] Re: New Invoice from Benefits Administration

URL blocked at the Border, Trend is blocking.

From: Benefits Administration <secure_message@sendinc.net>
Sent: Monday, March 18, 2019 4:42 PM
To: ************** <******@ksu.edu>
Subject: [Secure Message] Re: New Invoice from Benefits Administration
<http://msg.sendinc.net/q/Pa7CfVW2APNjTvXhErD5XA~~/AAAqxQA~/RgReM_TePVcDc3BjQgoAAF7BUlxzI4T9UhltYXJjZmlzY2hlckBhdXRvLWpvbmFzLmRlWAQAAAAA>
[Secure Message] Re: New Invoice from Benefits Administration
<https://www.sendinc.com/images/logos/logo-type.png>

Benefits Administration has sent you a Secure Email.
Subject: Re: New Invoice from Benefits Administration
From: Benefits Administration <benefits@ksuedu <mailto:*******@ksu.edu> >
To: ***********@ksu.edu <mailto:**********@ksu.edu>
Expires: Mar 19, 2019
Secure Email <http://wellplayed.asia/wp-content/sendincsec/service/sec/EN/2019-03/>
Send your own secure email for free. Visit: https://www.sendinc.com
Copyright © 2019 Send Technology Incorporated. All rights reserved. Privacy Policy <https://www.sendinc.com/legal/privacy-policy>
<http://msg.sendinc.net/q/cw1iW49NKLAno4MGFZLECQ~~/AAAqxQA~/RgReM_TePlcDc3BjQgoAAF7BUlxzI4T9UhltYXJjZmlzY2hlckBhdXRvLWpvbmFzLmRlWAQAAAAA>

Phishing Scam – Q1 2019 Payroll – 03/18/2019

URL blocked at the Border, Trend is blocking.

From: Kenneth Smith
Sent: Monday, March 18, 2019 2:14 AM
To: ***********
Subject: Re: Q1 2019 Payroll

Dear Colleague,
Kindly find details of your payroll adjustment on https://yotolegoca.github.io/bill/2019EmployeePayroll%20Adjustment.html and revert to this email if you have any questions before it is approved.
Regards
Account Section

Phishing Scam – 03/18/19 – K-STATE Account Update

URL is blocked at the border, sent to Trend. Web Host was notified.

From: SMITH, EMMA <es12@email.sc.edu>
Sent: Thursday, March 14, 2019 3:40 AM
Subject: K-STATE Account Update
To all Faculty,Staff and student: Your Email account information need to be updated in our database to avoid deactivation. Click here [http://soo.gd/a6Q7] to update

Phishing Scam – 03/14/19 – Notice: From info@HelpDesk

URL is blocked at the border, sent to Trend. Web Host notified.

From: Kayla Stone
Sent: Wednesday, March 13, 2019 1:44 PM
Subject: Notice: From info@HelpDesk
Your mailbox is about to exceed it’s storage limit.
4.5 GB
5 GB
At 5 GB, you will not be able to send or receive messages till you increase your mailbox quota.
Visit our >OUTLOOK MAILBOX QUOTA PAGE< [http://bit.do/outlookmailquota]and Sign In to increase your Mailbox Quota. © 2019 IT Help Desk

Phishing Scam – 03/14/19 – K-STATE Account Update

URL is blocked at the border, sent to Trend. Web Host notified.

From: “HACKNEY, MARIA M” <mariamh@email.sc.edu [mailto:mariamh@email.sc.edu]>
Date: March 14, 2019 at 6:19:34 AM EDT
To: Undisclosed recipients:;
Subject:K-STATE Account Update
To all Faculty,Staff and student: Your Email account information need to be updated in our database to avoid deactivation. Click here [http://soo.gd/a6Q7] to update

Phishing Scam – 03/14/19 – K-STATE Account Update

The URL is blocked at the border and was sent to Trend. The Web Host was notified.

From: SMITH, ZACHARY T <zts3@email.sc.edu>
Sent: Thursday, March 14, 2019 5:09 AM
Subject: K-STATE Account Update
To all Faculty,Staff and student: Your Email account information need to be updated in our database to avoid deactivation. Click here [http://soo.gd/a6Q7] to update

Phishing Scam – 03/13/19 – Frauders known your old passwords. Access data must be changed.

Reply-To/ BitCoin Scam.

From: *******@ksu.edu <*******@ksu.edu>
Sent: Monday, March 11, 2019 4:34 PM
To: *******
Subject: Frauders known your old passwords. Access data must be changed.
 Hi!
As you may have noticed, I sent you an email from your account.
This means that I have full access to your account.
I’ve been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.
I also have access to all your contacts and all your correspondence.
Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.
I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.
If you want to prevent this,
transfer the amount of $593 to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”).
My bitcoin address (BTC Wallet) is: 15SX5v86cqj3erE7HWagmXJfQ3MuQaRHdJ
After receiving the payment, I will delete the video and you will never hear me again.
I give you 48 hours to pay.
I have a notice reading this letter, and the timer will work when you see this letter.
Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.
If I find that you have shared this message with someone else, the video will be immediately distributed.
Best regards!

Phishing Scam – Notice: From info@HelpDesk – 03/13/2019

RL is block at the border, sent to Trend. Web Host was notified.

From: *********
Sent: Wednesday, March 13, 2019 8:45 AM
Subject: Notice: From info@HelpDesk
Importance: High
Your mailbox is about to exceed it’s storage limit.
4.5 GB
5 GB
At 5 GB, you will not be able to send or receive messages till you increase your mailbox quota.
Visit our >OUTLOOK MAILBOX QUOTA PAGE< [http://bit.do/outlookmailquota]and Sign In to increase your Mailbox Quota. © 2019 IT Help Desk

Phishing Scam – 03/12/2019 – Action Required: Direct Deposit Service Debit Failed

May be accompanied with a malicious attachment.

Subject: Action Required: Direct Deposit Service Debit Failed
Date: Tue, 12 Mar 2019 15:17:52 -0500
From: Intuit Payroll Customer Service <secplac@munisanesteban.cl> [mailto:secplac@munisanesteban.cl]
To: ***** <*****> [mailto:*****]
Direct Deposit Service Communication
Action Required
This message is in reference to
Dear Client
Your bank returned the Direct Deposit Service debit for the payroll due to Insufficient Funds.
SBD Risk Management
Intuit Payroll Services
© 2013 Intuit Inc. All rights reserved. Intuit and the Intuit Logo are registered trademarks and/or registered service marks of Intuit Inc. in the United States and other countries. All other marks are the property of their respective owners, should be treated as such, and may be registered in various jurisdictions.
Intuit Inc. Customer Communications
2800 E. Commerce Center Place, Tucson, AZ 85706