Kansas State University



Month: November 2019

Reply To Scam – Bill Payment- 11/22/2019

Reply to Scam involving a wire to money scam.

On 11/22/19, 7:57 AM, “presi871@gmail.com on behalf of Gabrielle Phillips” wrote:

Hello Jazz,

Kindly confirm if we can make an urgent western union transfer of $620
today? So I can forward to you the vendor details for payment. Thanks

Best regards
Gabrielle Phillips

Phishing Scam – Documents Pending – 11/21/2019

Blocked at the border.

From: *******
Sent: Thursday, November 21, 2019 7:55 AM
To: *******
Subject: Documents Pending
 Dear Account Holder,
Your incoming mails and documents have been placed on hold due to recent spam activities.
We need you to verify your account before you can view new files!
Verify Now [https://meetopennetwork.xyz/pnks/ksu.edu/Sign-In.html]
KSUweb – Services

Phishing Scam – 11/21/2019 – Just Received Thursday, November 21, 2019,7:31 PM

Phishing attempt with a link disguised as a voicemail message. Trend Micro is already aware the link is dangerous. Notified Microsoft. Blocked at the border.

From: tel: 18004458200
Sent: Thursday, November 21, 2019 1:31 PM
To: ******* ******* <*******@ksu.edu>
Subject: Just Received Thursday, November 21, 2019,7:31 PM
You have an lncoming VMS for *******@ksu.edu [mailto:*******@ksu.edu],
Received- 11/21/2019, 7:31 PM
Duration- 00:35secs
.PLAY [https://ingeniumdg.com/?0nJHGJGHNSBDVHMDNBBGVVSNDBGNSBDNDBVNSMSGDheev99_________________________________________________________________________________________________________________________________________GNSBDNDBVNSsmnksjwjhddjfejhfksjhfjhsfhsjbagstuenbvxvffatruwsisubdgdgfwvfgytraereqtuoejmenbvdgftauavdfwhyejrjhhfbeejhuwfnewjjbejsjbvdhcjvdnkcieoepeirurhrgbensnsnnsbdhgsnbanhqgteyeiejhdndbvxvfzahgsjssdfgg5IV=*******@ksu.edu]
CONFIDENTIAL: The information contained in this electronic mail message is intended for the named recipients only. This message contains material that is privileged, confidential, proprietary and trade secret and otherwise protected from disclosure.

Phishing Scam – KSU PART – TIME JOBS OPPORTUNITY – 11/21/2019

URL has been blocked at the border.

From: *******
Sent: Thursday, November 21, 2019 8:58 AM
To: *******;
There’s an ongoing survey recruitment exercise for part-time or full-time survey takers. You’re paid to shop and evaluate stores and businesses around you. You get to make up to $300 weekly. You’ll evaluate and comment on customer service rendered. It also doubles as a great 2nd job and does not affect your present employment or studies.I tried it and i made cool cash, If you are interested you can visit their website at Premiercustomervmetrics.com [http://premiercustomervmetrics.com/] to apply and read more about the job.
Best Regards.
Job Placement And Student Services
Kansas State University
Manhattan, Kansas 66506, 
United States.

Phishing Scam – 11/21/2019 – Access locked : Server Error

Phishing scam with a link. Notified Trend Micro, Microsoft, and the web host.

From: “k-state.edu [http://k-state.edu] Server Error.”
Subject: Access locked : Server Error
Date: November 21, 2019 at 9:32:50 AM CST
To: *******@k-state.edu [mailto:*******@k-state.edu]
Due to a server error on your e-mail, (*******@k-state.edu [mailto:*******@k-state.edu]) (7) incoming messages were delayed.
Log on to your portal to recover your delayed messages
Recover Delayed Messages [https://us5.mailchimp.com/mctx/click?url=https%3A%2F%2Fmail.softwaretestingtraining.net%2Ftimet%2Frrs2base.php?sp=*******@k-state.edu&xid=03748d7bd4&uid=126748754&pool=&subject=]
2019 Me‌ss‌ag‌e Ce‌nt‌er

Phishing Scam – 11/20/19 – Fraudsters know your old passwords. Access data must be changed.

Bitcoin Scam.

From: Thalia <huruinuan@yifengzy.cn>
Sent: Wednesday, November 20, 2019 05:50 PM
To: ******
Subject: Fraudsters know your old passwords. Access data must be changed.
I am a hacker who has access to your operating system.
I also have full access to your account.
I’ve been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.
I also have access to all your contacts and all your correspondence.
Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.
I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.
If you want to prevent this,
transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”).
My bitcoin address (BTC Wallet) is:  3Bm7ghBaXJRXGRgidWvXHdPZx3M1bbLp78
After receiving the payment, I will delete the video and you will never hear me again.
I give you 50 hours (more than 2 days) to pay.
I have a notice reading this letter, and the timer will work when you see this letter.
Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.
If I find that you have shared this message with someone else, the video will be immediately distributed.
Best regards!

Phishing Scam – 11/20/19 – RE: Call for Nominations – State Extension Advisory Council (SEAC)

Reply-to phishing scam.

From: Rosalita <coletas@aeroexpresso.com.br>
Sent: Wednesday, November 20, 2019 2:05 PM
To: **** <*****@ksu.edu>
Subject: RE: Call for Nominations – State Extension Advisory Council (SEAC)

I will need a copy of the permit as well, so I can send it in for reimbursement.

As always, thank you for your business.


—–Original Message—–
Dear Extension Board Members,
State Extension Advisory Council (SEAC) members will be elected for the 2019-2022 term in January. Because Partnership meetings are now being held via Zoom, we’ll be sending a ballot to each local unit. The board chair will cast the board’s vote for SEAC representation. Now is the time to nominate candidates for SEAC membership.
SEAC By-Laws Change to Allows any Board Member to Serve Each elected SEAC member shall have served a minimum of two years and currently be serving or within the last two years have served on a County Executive Board or a District Governing Body. We would like for you to have your nominations to your regional office no later than Friday, December 7, 2018 Make sure the candidate is willing to actively participate if elected.
With your nomination, please submit a digital picture of the candidate, and in less than 500 words information the candidate chooses to share about the following:
· family/occupation/interests
· community involvement
· involvement in Extension programs
· Extension Board leadership experience
· goals envisioned for K-State Research and Extension

This information will be shared with Boards electronically, and will be posted on the SEAC website. Voting will occur in early January.
SEAC members serve as a consultative group to the Extension Director regarding Kansas Extension programs. They meet twice a year, in February in Topeka and in August at locations that rotate around the state. Members also have the opportunity to participate once during their SEAC term in the Public Issues Leadership Development conference in Washington D.C., which includes a visit to our representatives on Capitol Hill.
Thank you for giving serious consideration to SEAC nominations. The document, “Opportunities, Roles, and Expectations for the State Extension Advisory Council” as well as more information about SEAC can be found on the Extension Board Leadership web site:

Phishing Scam – 11/20/19 – Sent from my mobile.

Reply-To Scam/Spam Message chain.

From: 7854106098@pm.sprint.com <7854106098@pm.sprint.com>
Sent: Wednesday, November 20, 2019 4:08 PM
To: 13165739450@icmms1.sun5.lightsurf.net <13165739450@icmms1.sun5.lightsurf.net>; 17855564167@icmms1.sun5.lightsurf.net <17855564167@icmms1.sun5.lightsurf.net>; 17853132279@icmms1.sun5.lightsurf.net <17853132279@icmms1.sun5.lightsurf.net>; **** <*****@ksu.edu>; 17854774161@icmms1.sun5.lightsurf.net <17854774161@icmms1.sun5.lightsurf.net>; 17853417738@tls.sprint.internal.com <17853417738@tls.sprint.internal.com>; 17853411839@icmms1.sun5.lightsurf.net <17853411839@icmms1.sun5.lightsurf.net>; 17855640435@icmms1.sun5.lightsurf.net <17855640435@icmms1.sun5.lightsurf.net>; 17853412981@sprint.internal.com <17853412981@sprint.internal.com>
Sent from my mobile.
Test. Please let me know if you received the message
I did. This is Mike E