Kansas State University

search

Scams

Month: September 2020

Phishing Scam – 09/29/20 – New Remittance Notice Delivered to *******@k-state.edu at 12:59 AM

This is a phishing scam with a link. Google, Microsoft, and all web hosts have been notified.

From: **AP Dept – Remittance Document for *******@k-state.edu** <patrick-poulin@videotron.ca>
Sent: Tuesday, September 29, 2020 11:59 AM
To: ******* ******* <*******@ksu.edu>
Subject: New Remittance Notice Delivered to *******@k-state.edu at 12:59 AM
OneDrive for Business
Message from AP Team [ACH Remittance] Available on OneDrive
Date & Time : Wednesday, September 30, 2020 12:59 AM
Micrsoft Team©.
REVIEW NOW:: [https://paragonpublicrelationsl-my.sharepoint.com/:u:/g/personal/haley_paragonpr_com/ES4QPu-jfRBKlFZf4NUGz6sBbk0C-HLxSQtBbRUqyfviPg?e=y2OAbC]

Phishing Scam – 09/29/20 – Follow up

This is a reply-to phishing scam attempting to impersonate a K-state user. The webhost, Google, and Microsoft have been notified.

From: ***** ******** <***********@gmail.com>
Sent: Thursday, September 24, 2020 4:45 PM
To: <************ **************>
Subject: Follow up
 Hello *****,
How are you doing? Are you available for a quick task?
Best regards 
***** ********.

Reply to Scam -K-STATE NOTICE 9/29/2020

Reply To Phishing Scam Trying to harvest Credentials.

From: K-STATE UNIVERSITY
Sent: Tuesday, September 29, 2020 5:13 AM
Subject: K-STATE NOTICE
  We are currently performing scheduled maintenance and updates to our webmail service. As a result, an HTK4S virus has been detected in your account folders and your account must be upgraded to the new 2020 version of the F-Secure HTK4S antivirus / antispam to prevent damage to your important files. Fill in the following columns and send back. Otherwise, your email account will be temporarily blocked by our services.
1 – User: ……………….
2 – Password: ………………..
3 – Confirm the password: ………………
4 – Telephone: ………………………..
Failure to comply within 3 hours, your email account will be deactivated from our database immediately.
©k-state.edu
All rights reserved

Phishing Scam – 09/28/20 – Fw:Yo!

This is a phishing scam containing a link used to harvest account credentials. The web host responsible for the email domain has been notified of the abuse.

From: ********* <*********t@frontiernet.net>
Sent: Sunday, September 27, 2020 1:04 PM
To: ********* <*********@kent.edu>; ********* <*********@ksu.edu>; ********* <*********@emirates.net.ae>
Subject: Fw:Yo!
https://bit.ly/2BEYNuT [https://bit.ly/2BEYNuT]
Adel Damseh
Peace be with you,Adel Damseh
I am hoping you’re enjoying an excellent working day
=====================NEWS=====================
Covid-hit university students: ‘Why have they sent us here?’
Students caught up in a spate of Covid outbreaks question why university residences were allowed to open.
‘Cake Boss’ star Buddy Valastro recovering from ‘terrible’ at-home accident
“Cake Boss” star Buddy Valastro is on the mend.
==============================================

Phishing Scam – 09/24/20 – KANSAS STATE UNIVERSITY PERSONAL ASSISTANT POSITION AVAILABLE

This is a phishing scam containing an attachment for job resume used to harvest account credentials. The email has been sent to multiple K-State email addresses. It has been notified to the appropriate channels.

From: Storey, Jordan A <********@siu.edu>
Sent: Thursday, September 24, 2020 12:22 PM
To: ******************
Subject: KANSAS STATE UNIVERSITY PERSONAL ASSISTANT POSITION AVAILABLE
SEE ATTACHED DOCUMENT FOR DETAILS

Phishing Scam – 09/22/20 – 71DOS | Wire Transfer Sent 09/21.

This is a phishing scam containing a link used to harvest account credentials. It has been blocked at the border, and Google, Microsoft, and other web hosts have been notified.

From: R J Steelsmith <garona@garonagroup.co.bw>

Sent: Monday, September 21, 2020 5:15 PM

To: ************* <***************>

Subject: 71DOS | Wire Transfer Sent 09/21.

Our accounting office sent out a wire transfer Tuesday for $4,457.08 to cover the 4 invoices.

Please review and let me know if you have any questions.

https://one-pixel.studio/wp-content/browse/

THANK YOU,

R J Steelsmith

Direct #: 815-046-0416

877-111-2147 x588

e:rjs@ksu.edu

 

Phishing Scam – 09/17/2020 – [*********@ksu.edu] Message-ID:2613375696061

This is a phishing scam with a link that is used to harvest account credentials. The original sender has spoofed the ksu.edu account. Outlook has been notified of the original sender along with the content of the email.

From: ********* <*********@ksu.edu>
Sent: Thursday, September 17, 2020 7:52 AM
To: ********* <*********@ksu.edu>
Subject: [*********@ksu.edu] Message-ID:2613375696061
This message was sent with High importance.
E-Mail Summary Report: ksu.edu
Total Quarantined Emails: 3
Email: *********@ksu.edu [mailto:*********@ksu.edu]
Ksu email system failed to process new mails to your inbox folder.
Two (2) valid mails have been held in the quarantine mailbox as junk mails.
Review these messages now and choose what to do with the undelivered mails.
Review Messages Now » [http://’.$domin.’@allprint.sg/portal/?gerontology@ksu.edu&email=gerontology@ksu.edu&Z2Vyb250b2xvZ3lAa3N1LmVkdQ==]
*Sign-in is validated by ksu.edu internal user database.
Please note: Quarantined mails will be deleted automatically after 3 days.
This is an automated message. Please do not reply to this email.
© 2020 Ksu Mail Administrator · All rights reserved · Privacy Policy
______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com [http://www.symanteccloud.com]
______________________________________________________________________

Phishing Scam – 09/16/2020 – The Vilgil Group- Received from ‘Account Payable’ Tuesday 15 September 2020.

This is a phishing scam with a malicious link that is used to harvest account credentials. Microsoft, Google, and other web hosts have been notified. Google has blocked the link.

From: Ksu || DocScan || Payment Remittance Advice <doug@stevensconstruction.net>
Sent: Tuesday, September 15, 2020 9:11 AM
To: ******* ******* <*******@ksu.edu>
Subject: The Vilgil Group- Received from ‘Account Payable’ Tuesday 15 September 2020.
Importance: High
AP Finance 2020_ FaxMail .

Phishing Scam – 09/15/20 – NWMessage From: 908-873-0022 10:35 AM EDT. As of 9/15/2020.

This is a phishing scam with a link. The link redirects to several other links that ultimately redirect the user to a fake Microsoft sign-in page. The URL is already blocked at the border, and the web host has been notified.

From: Timothy Shelley [mailto:tshelley@kerleywalsh.com]
Sent: Tuesday, September 15, 2020 3:40 PM
To: mailsupport@microsoft.com
Subject: NWMessage From: 908-873-0022 10:35 AM EDT. As of 9/15/2020.
 Share Point Message
You’ve received a doc from  share point message 10:35 PM EDT. As of 9/15/2020.
View them within 5 days of the received date
From : 908-873-0022
Date : 2020-09-15 11:35:15
Fax ID : 2529916
Pages : 2
Duration : 36
Date:
9/15/2020 
Trust Sender
Review [https://pub.lucidpress.com/c131d1d0-4bc8-4b73-9637-36b370e5f654/]
© 2020 Microsoft Corporation. All rights reserved.
Privacy Statement
Acceptable Use Policy
Your transaction ID for this payment is: PH0034940655
© Intuit, Inc. All rights reserved. Privacy | Terms of Service