Kansas State University

search

Scams

Author: IT Help Desk

Phishing Scam – 10/14/20 – Hello dear

This is a reply-to scam phishing for replies. The responsible email address has been reported to the appropriate channels.

From: Binta Konate <bkonatel985@yahoo.fr>
Sent: Wednesday, October 14, 2020 4:43 PM
To: bkonatel985@yahoo.fr
Subject: Hello dear
Hello dear
Good day and hope you are fine.
My name is Binta Konate, from Togo, West Africa. I was only child of my father, the Late Engineer Konate and my mother died when I was only 8 years old, and my Father died after a brief illness of Liver Cancer,
After my father’s burial my uncle and her wife threatening me with hate words as they were only interested in my Father’s house and land properties.
One evening my uncle threatened that he would kill me if i don’t handover house documents of my father to him, I know he is an evil man and I am too young to challenge him, I quietly gave him the documents of the house.
Although my father warned me how evil he would be, and my Father warn me to be careful with him.
Contacting you is because my father had Savings outside the country worth’s $11.5million dollars; all the Bank deposit documents of this fund are well secured and with me now.
My uncle did not know about this money and as he continues searched my father’s room every night. I decided to flee with the suitcase of the deposit documents out of our country to Dakar Senegal where I am staying now.
Please dear, I am asking for your assistance in the following ways:
1. To stand with me as a family Friend living abroad and to help me get this money transferred to your Bank account in your country and you invest it on my behalf.
2. You will be my guardian in your country to give me a better life and help me find a good school to continue my education and the investment will be in your control till i finished university
3. With good faith in me, I would like you and me to discuss and agree on the amount of money i will give you for your help.
Please kindly reply me back with any question you want to know about me and about this situation,
We can talk on phone if you wouldn’t mind to send me your direct whatsapp number.
I thank you in advance for your kind assistance in this my situation.
Kindest regards,
Binta Konate.

Phishing Scam – 10/14/20 – Notification:(10/14/2020 5:48:47 PM)

This is a phishing scam with a link. The sender and site have been reported to the appropriate channels.

From: ksu.edu_O365 <jspoales@olgchs.org>
Sent: Wednesday, October 14, 2020 12:48 PM
To: K-State ******* <*******@ksu.edu>
Subject: Notification:(10/14/2020 5:48:47 PM)
 Doc DF70508900 shared via Excel
*******@ksu.edu you have new document send to you view Excel
Receiver
Successful

More Details -View Here [https://70-13.community.chat]
 Powered by ksu.edu for Home & Business

———————————————————————
Notification:(10/14/2020 5:48:47 PM)
K
ksu.edu_O365 <jspoales@olgchs.org>
Wed 10/14/2020 12:49 PM





To:
 K-State ********
 Doc DF70508900 shared via Excel
*******@ksu.edu you have new document send to you view Excel
Receiver
Successful

More Details -View Here [https://70-13.community.chat/]
 Powered by ksu.edu for Home & Business

Reply
Forward
1 Item
1 Item
1 Item

Phishing Scam – 10/09/2020 – Transfer Request

A user has been compromised by another user using a different domain address. The webhost and Microsoft has been notified of this issue.

From: ********* [*********@ksu.edu]
Sent: Friday, October 9, 2020 2:54 PM
To: *********@corvusblue.net
Subject: Transfer Request
Hi Kantha,
I want you to make a payment to a vendor. Let me know if you can get it done today so i can forward you their bank details.
Liz

Phishing Scam – 10/08/2020 – Message by: 360 669-4200 04:55 PM EDT As of 10/07/2020.

This is a phishing scam with a malicious link that contains a fake fax receipt with false links. Microsoft and other web hosts have been notified.

From: ********** <**********@esd123.org>
Sent: Wednesday, October 7, 2020 3:53 PM
To: **********@ksu.edu
Subject: Message by: 360 669-4200 04:55 PM EDT As of 10/07/2020.
Review These New Message
View them within 1 days of the received date
From : ☎ 360 923 9179
Fax ID : 2949538
Pages : 2
Date:
10/07/2020
Trust Sender
Review Here [https://canva.com/design/DAEJ7i1E1lc/TrKmZu2TOuzeW3yUM5lt7A/view]
© 2020 Microsoft Corporation. All rights reserved.
Privacy Statement
Acceptable Use Policy
Your transaction ID for this payment is: PH0034940655
© Intuit, Inc. All rights reserved. Privacy | Terms of Service
NVOCC Services are provided by CEVA as agents for and on behalf of Pyramid Lines Limited trading as Pyramid Lines.
This e-mail message is intended for the above named recipient(s) only. It may contain confidential information that is privileged. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail by error, please immediately notify the sender by replying to this e-mail and deleting the message including any attachment(s) from your system. Thank you in advance for your cooperation and assistance. Although the company has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
NVOCC Services are provided by CEVA as agents for and on behalf of Pyramid Lines Limited trading as Pyramid Lines.
This e-mail message is intended for the above named recipient(s) only. It may contain confidential information that is privileged. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail by error, please immediately notify the sender by replying to this e-mail and deleting the message including any attachment(s) from your system. Thank you in advance for your cooperation and assistance. Although the company has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
NVOCC Services are provided by CEVA as agents for and on behalf of Pyramid Lines Limited trading as Pyramid Lines.
This e-mail message is intended for the above named recipient(s) only. It may contain confidential information that is privileged. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail by error, please immediately notify the sender by replying to this e-mail and deleting the message including any attachment(s) from your system. Thank you in advance for your cooperation and assistance. Although the company has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.

Phishing Scam – 10/08/2020 – from (607) 973-7564 on 10/08/2020

This is a phishing scam with a malicious link that contains a fake SharePoint document. Microsoft and other web hosts have been notified.

From: *********@support.zb3.so-net‎ <*********@chefsmirnov.com>
Sent: Thursday, October 8, 2020 12:52 PM
To: *********@support.zb3.so-net‎ <*********@chefsmirnov.com>
Subject: from (607) 973-7564 on 10/08/2020
NEW FAX DOCUMENTS
*Date/Time: Thursday, 08 October 2020/ 11:15 GMT
*Reference: SP4567-987UYS_02Doc
*Total Pages: 2
To view this document, Open the attachment.
[https://immense-bullfrog.10web.me/]
Download PDF [https://immense-bullfrog.10web.me/]
Disclaimer: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.
The FAA Safety Policy Voice of
Non-commercial General Aviation
STAY CONNECTED:
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTQsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwczovL3R3aXR0ZXIuY29tL2ZhYW5ld3MifQ.nNI9WMuxxboCRsHjbBQkrc9hB5tPzIBuYwW2f6efe1A/s/60156175/br/81702316758-l]
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTUsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwOi8vd3d3LmZhY2Vib29rLmNvbS9GQUEifQ.3CbcRZvys9WDhcZNgk-vzEOzjSALbWzGYyuq-WO4kEo/s/60156175/br/81702316758-l]
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTYsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwOi8vd3d3LmxpbmtlZGluLmNvbS9jb21wYW55L2ZhYSJ9.4FGAi_fmPruMvOSXP3Nf52k7xBJoWGtjYJgmff1HDQE/s/60156175/br/81702316758-l]
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTcsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwOi8vd3d3LnlvdXR1YmUuY29tL3VzZXIvRkFBbmV3cyJ9.yfXrEeEzJ8LwhYFj_YkcLEDV50wgEczcrrH0vB1cy6U/s/60156175/br/81702316758-l]
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTgsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL2ZhYS8ifQ.7EEPhDStjiZLnaZwafBHMstkLmyL3L3UahTmy7ekaTw/s/60156175/br/81702316758-l]
SUBSCRIBER SERVICES
Manage Preferences [https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTksInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwczovL3B1YmxpYy5nb3ZkZWxpdmVyeS5jb20vYWNjb3VudHMvVVNBRkFBL3N1YnNjcmliZXIvZWRpdD9wcmVmZXJlbmNlcz10cnVlI3RhYjEifQ.VetRlJm7AgwYGH2vhpNRHxM4Oz4YXfPvcggWr1WpOfc/s/60156175/br/81702316758-l] | Unsubscribe [https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMjAsInF1ZXJ5X3BhcmFtcyI6WyJ2ZXJpZmljYXRpb24iLCJkZXN0aW5hdGlvbiJdLCJ1cmkiOiJicDI6Y2xpY2siLCJidWxsZXRpbl9pZCI6IjIwMjAwNzMwLjI1MDgyODcxIiwidXJsIjoiaHR0cHM6Ly9wdWJsaWMuZ292ZGVsaXZlcnkuY29tL2FjY291bnRzL1VTQUZBQS9zdWJzY3JpYmVyL29uZV9jbGlja191bnN1YnNjcmliZSJ9._d_jgPTL2i3IezP5qoAtmP5cl2jlwFkXY6Bxnni0mRU/s/60156175/br/81702316758-l?verification=5.9b51fc2d391acd6c6bb316978c439ac7&destination=doug.moss%40aeropacific.net] | Help [https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMjEsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwczovL3N1YnNjcmliZXJoZWxwLmdvdmRlbGl2ZXJ5LmNvbS9oYy9lbi11cyJ9.VoLfO-FeEzplMf–1EXNjdydT7Xut2ZKGD9_qe3IxUg/s/60156175/br/81702316758-l]
This email was sent to doug.moss@aeropacific.net [mailto:doug.moss@aeropacific.net] using GovDelivery Communications Cloud on behalf of: U.S. Federal Aviation Administration · 800 Independence Avenue, SW · Washington, DC 20591 · 1-866-TELL-FAA (1-866-835-5322)
[https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMjIsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMDA3MzAuMjUwODI4NzEiLCJ1cmwiOiJodHRwczovL3N1YnNjcmliZXJoZWxwLmdyYW5pY3VzLmNvbS8ifQ.h_FSg3c_hqb1cavBOE4xNtgdR65s3Yg4FQxZj8M8mPw/s/60156175/br/81702316758-l]

Phishing Scam – 10/06/2020 – KSU IT Help Desk

This is a phishing scam with a malicious link that impersonates the K-State IT Help Desk. The jotform service is being abused to harvest username and passwords. The social engineer is using fear of loss of a service tactic. Google, Microsoft, and other web hosts have been notified.

From: KSU
Sent: Tuesday, October 06, 2020 4:56 PM
To: <*******@ksu.edu>
Subject: KSU IT Help Desk
Dear email User,
 Your request to De-activate your KSU eID has been received and will be completed shortly. If you did not make this request, click Here [https://form.jotform.com/202797066585064]
Thank You
KSU IT Help Desk

Phishing Scam – 10/06/20 – Follow up

This is a reply-to phishing scam attempting to impersonate a K-state user, specifically a Department Head. The webhost and Google have been notified.

From: ********* <*********@gmail.com>
Date: Friday, October 2, 2020 at 6:38 AM
To: ********* <*********@ksu.edu>
Subject: Follow up
Are you available for a quick task?
Department Head and Professor
2184 Engineering Hall

Phishing Scam – 10/01/20 – Quick quick

This is a reply-to phishing scam attempting to impersonate a K-state user. The webhost and Google have been notified.

From: ********* <*********@gmail.com>
Sent: Thursday, October 1, 2020 7:24 AM
To: ********* <*********@ksu.edu>
Subject: Quick quick
Can you give me your available text number that i can reach you at?–
Dr. Jackie Spears Interim CEO and dean Kansas State University’s Olathe campus

Phishing Scam – 10/01/20 – We appreciate your interest in contributing your professional expertise to the KANSAS STATE UNIVERSITY of the KANSAS STATE UNIVERSITY your employer of choice!!!

This is a phishing scam with an attachment. Gmail and the domain webhost has been notified.

From: KANSAS STATE UNIVERSITY <*******@gmail.com>
Sent: Thursday, October 1, 2020 5:01 AM
To: ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>, ******* ******* <*******@ksu.edu>
The effects of the COVID-19 pandemic have resulted in hiring for positions. KANSAS STATE UNIVERSITY Campus will continue to recruit for essential positions and we ask for your understanding and patience with our application process during this unprecedented time. In addition to campus jobs listed above, Kindly see the attached below to find more KANSAS STATE UNIVERSITY employment opportunities information.