Kansas State University

search

Scams

Month: December 2019

Phishing Scam – 12/09/19 – Application pack – *****

Phishing Scam with link.

From: ***** <*****@ksu.edu> <ugd.quality@chaitycomposite.com>
Sent: Monday, December 9, 2019 1:29 PM
To: ***** <*****@ksu.edu>
Subject: Application pack – *****

Your question has been resolved, please see attachment.

I have enclosed a copy of the docs for your reference, you can download view using this link:
https://edu.widion.com/wp-admin/personal-disk/guarded-uQuAQzMj-GjoLcOEAg/om77Tf-ode77w4m4k/

Thanking you in advance for your assistance.

******

Phishing Scam – 12/06/19 – *****

Phishing Scam with Attachment/Trojan.

From: ***** <****@ksu.edu> <asgheralidina@raha.com>
Sent: Friday, December 6, 2019 5:52:51 PM
To: **** <****@ksu.edu>
Subject: *****
 Dear ******,
Please see attached.
Thanks and regards
Marketing coordinator
e ***@ksu.edu
___________________________________________________
P *Please don’t print this e-mail unless you really need to*

Phishing Scam – 12/06/19 – ksu You have a new Docufile

Phishing Scam with Link.

From: ksu eCloudStorage <KGisL@spice.or.jp>
Sent: Friday, December 6, 2019 3:47 PM
To: ***** <*****@ksu.edu>
Subject: ksu You have a new Docufile

Yoww/,\,ksu.edu,/,\sdu hww/,\,ksu.edu,/,\sdavww/,\,ksu.edu,/,\sde a nww/,\,ksu.edu,/,\sdeww/,\,ksu.edu,/,\sdw iww/,\,ksu.edu,/,\sdncww/,\,ksu.edu,/,\sdomww/,\,ksu.edu,/,\sdinww/,\,ksu.edu,/,\sdg fww/,\,ksu.edu,/,\sdaww/,\,ksu.edu,/,\sdx dww/,\,ksu.edu,/,\sdoww/,\,ksu.edu,/,\sdc coww/,\,ksu.edu,/,\sdntww/,\,ksu.edu,/,\sdaiww/,\,ksu.edu,/,\sdniww/,\,ksu.edu,/,\sdnww/,\,ksu.edu,/,\sdg 6ww/,\,ksu.edu,/,\sd pww/,\,ksu.edu,/,\sdagww/,\,ksu.edu,/,\sdeww/,\,ksu.edu,/,\sds foww/,\,ksu.edu,/,\sdrww/,\,ksu.edu,/,\sd yoww/,\,ksu.edu,/,\sduww/,\,ksu.edu,/,\sdr rww/,\,ksu.edu,/,\sdevww/,\,ksu.edu,/,\sdieww/,\,ksu.edu,/,\sdw.ww/,\,ksu.edu,/,\sd

Prww/,\,ksu.edu,/,\sdevww/,\,ksu.edu,/,\sdieww/,\,ksu.edu,/,\sdw Fww/,\,ksu.edu,/,\sdaww/,\,ksu.edu,/,\sdx Mww/,\,ksu.edu,/,\sdesww/,\,ksu.edu,/,\sdsaww/,\,ksu.edu,/,\sdgww/,\,ksu.edu,/,\sde

Lww/,\,ksu.edu,/,\sdinww/,\,ksu.edu,/,\sdkww/,\,ksu.edu,/,\sd exww/,\,ksu.edu,/,\sdpiww/,\,ksu.edu,/,\sdrww/,\,ksu.edu,/,\sdeww/,\,ksu.edu,/,\sds aww/,\,ksu.edu,/,\sdfww/,\,ksu.edu,/,\sdteww/,\,ksu.edu,/,\sdr Tuesday, December 10, 2019 oww/,\,ksu.edu,/,\sdf sww/,\,ksu.edu,/,\sdhww/,\,ksu.edu,/,\sdaww/,\,ksu.edu,/,\sdreww/,\,ksu.edu,/,\sdd dww/,\,ksu.edu,/,\sdocww/,\,ksu.edu,/,\sduww/,\,ksu.edu,/,\sdmww/,\,ksu.edu,/,\sdeww/,\,ksu.edu,/,\sdnww/,\,ksu.edu,/,\sdt.

Phishing Scam – 11/29/19 – IMPORTANT! I recorded YOU mɑsturbating! I have *****.mp4 video file!

Bit-coin scam.

From: Anonymous Hacker <mittiezhang@rebless.frumpled.monster>
Sent: Friday, November 29, 2019 9:46 PM
To: ****** <*****@ksu.edu>
Subject: IMPORTANT! I recorded YOU mɑsturbating! I have *****.mp4 video file!
 ATTENTION: *****@ksu.edu
The last time you visited a porn website with teenagers, you silently downloaded and installed the software I developed.
My software has turned on your camera and recorded both your screen and the act of your mɑsturbation..
My sneaky program also downloaded all your email contact lists and a list of your friends from social networks.
I have the – *****.mp4 video file – with you jerking off to teenagers, as well as a file with your relatives and associates email addresses.
After downloading those files let me say one thing: your fantasies are far beyond the normal!
If you want me to delete both files and keep your secret, you must send me the Bitcoin (BTC) payment.
I give you 72 houɼs only to send the Bitcoin transfer.
If you don’t know how to pay with Bitcoin, visit Google and search – how to buy Bitcoin (BTC).
Visit one of the brokers (Coinbase, Bitstamp, anycoindirect), buy Bitcoin and send it to my address.
Only then I will leɑve you ɑlone!
At anycoindirect you can buy Bitcoin instantly with SEPA, Giropay, EPS, Mybank, Sofort, credit cards or Bancontract.
Here are the payment details:
Send 2,000 USD = 0.277053 BTC
to this Bitcoin address as soon as possible:
37MjfkVxv5XW63g2yDt4vpa8uiY8fQKBz2tRIXFGdxG5Yfx3VnHqv6LXa4Z5he5HqTnM
(copy & paste address – it’s case sensitive)
1 BTC = 7,530 USD right now, so send exactly 0.277053 BTC to my Bitcoin wallet.
Do not try to cheat me!
As soon as you open this Email I will be notified you opened it.
I am monitoring all actions on your device..
This Bitcoin address is linked to you only, so I will know immediately when you send the correct amount.
When you pay in full, I will remove both files (your mɑsturbation video and your contact lists) and I will deactivate my sneaky program.
Changing your password will not help you, I will still have access to your device remotely.
If you choose not to send me the Bitcoin transfer…
I will send your mɑsturbation video to all your friends and associates from your contact lists that I downloaded from your device.
Your family members will receive it as well. You will regret it, trust me.
Here are the payment details again:
Send 2,000 USD = 0.277053 BTC
to this Bitcoin address as soon as possible:
37MjfkVxv5XW63g2yDt4vpa8uiY8fQKBz2tRIXFGdxG5Yfx3VnHqv6LXa4Z5he5HqTnM
(copy & paste address – it’s case sensitive)
You can visit the police but they will not solve your real problem.
My program will still be installed on your device and I still will own your mɑsturbation videos.
Police will not catch me anyway. I know what I am doing. I do not live in your country and I know how to stay anonymous.
Don’t ever try to deceive me – I will know it. My program is recording all the websites you visit and all your key presses. If you try to trick me – I will send this ugly video to everyone you know, including your family members.
Don’t forget the potential shame – your life can be a disaster!
I am waiting for your Bitcoin payment.
You have 72 houɼs left.
Anonymous Hacker
P.S. If you need more time to pɑy, open your notepad on your device and write ’48h more’. Only this way you can contact me. I will consider giving you more time before I release the video, but only when I see that you are really struggling to buy btc. I know you can afford it – so do not try to trick me!

Phishing Scam – Invoice #07455897

Phishing Scam with attachment. Coming from two different emails (rolando.soto@abe.bo and guatemala@psycoware.com

From: Robert Bailey Sent: Wednesday, December 4, 2019 12:54 PM
To: ********
Subject: Invoice #07455897
Dear Paula Connors,

For your immediate action.
Please see the attached file.
It was nice working with you!

Robert Bailey
E

Phishing Scam – Just Received Wednesday, December 4, 2019,2:35 PM – 12/4/2019

Phishing Scam Link has been blocked

From: 610-863-6205 [mailto:PlayOnlineRecording-ListenVM988273.-mps000.srvr.VM@huttie.com]
Sent: Wednesday, December 4, 2019 8:36 AM
To: *********
Subject: Just Received Wednesday, December 4, 2019,2:35 PM
w
You have an lncoming VMS for ********,
Received- 12/4/2019, 2:35 PM
Duration- 00:35secs
.PLAY [https://voiceplayrecord.com/?0nJHGJGHNSBDVHMDNBBGVVSNDBGNSBDNDBVNSMSGDheev99_________________________________________________________________________________________________________________________________________GNSBDNDBVNSsmnksjwjhddjfejhfksjhfjhsfhsjbagstuenbvxvffatruwsisubdgdgfwvfgytraereqtuoejmenbvdgftauavdfwhyejrjhhfbeejhuwfnewjjbejsjbvdhcjvdnkcieoepeirurhrgbensnsnnsbdhgsnbanhqgteyeiejhdndbvxvfzahgsjssdfgg5IV=ab*******@ksu.edu]
CONFIDENTIAL: The information contained in this electronic mail message is intended for the named recipients only. This message contains material that is privileged, confidential, proprietary and trade secret and otherwise protected from disclosure.

Baiting Scam – FW: Urgent info! 12/04/2019

Sent to Google and Microsoft anti-phishing. The email contained a word document with an attached virus.

Email Body:

—–Original Message—–
From: **** <********>
Sent: Tuesday, December 3, 2019 4:29 PM
To: ******** <***********>
Subject: Urgent info! 12/04/2019
Hi

Please find the attached document.

Many thanks,

*********
*************

This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Phishing Scam – 11/03/2019 – Your account was under attack! Change your access data!

Reply-to scam. Sent to Google anti-phish and Microsoft anti-phish.

Hello!
I am a hacker who has access to your operating system.
I also have full access to your account.
I’ve been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.
I also have access to all your contacts and all your correspondence.
Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.
I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.
If you want to prevent this,
transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”).
My bitcoin address (BTC Wallet) is:  3HDzaB7fvtKB7sobiXYJW8DwaxyLxBnCkH
After receiving the payment, I will delete the video and you will never hear me again.
I give you 50 hours (more than 2 days) to pay.
I have a notice reading this letter, and the timer will work when you see this letter.
Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.
If I find that you have shared this message with someone else, the video will be immediately distributed.
Best regards!

Phishing Scam – 12/02/2019 – High level of danger. Your account was under attack.

Reply-to scam. Sent to Google anti-phishing and to Microsoft.

Hello!
I am a hacker who has access to your operating system.
I also have full access to your account.
I’ve been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.
I also have access to all your contacts and all your correspondence.
Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.
I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.
If you want to prevent this,
transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”).
My bitcoin address (BTC Wallet) is:  1Dg5UsxMEG41TC3i9ugxcFV6cVtz8cpfXE
After receiving the payment, I will delete the video and you will never hear me again.
I give you 50 hours (more than 2 days) to pay.
I have a notice reading this letter, and the timer will work when you see this letter.
Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.
If I find that you have shared this message with someone else, the video will be immediately distributed.
Best regards!