Kansas State University



Category: Scams

Scam emails attempting to get recipients to perform some action that could be harmful – click a link, reply to the email, etc.

Phishing Scam – 08/10/2019 – Immediate Action Required: Verify email address

Reply to Scam
Sent to Google anti-phishing and Microsoft

From: AT&T Services <att-services.cn.512501804@emaildl.att-mail.com>
Sent: Saturday, August 10, 2019 4:24 AM
To: ***** *** <****@ksu.edu>
Subject: Immediate Action Required: Verify email address
Incoming! Important info for you.
Keep your account info safe
We’d like to start emailing important billing info to your account ending in 7060. But, first, we need you to confirm your email address for this account.
To comply with government regulations, we have to get your consent to email you certain info. This includes notices that your bill is ready, order confirmations, and status updates.
Take a minute to confirm your email address so we can email you this important account info.
Confirm email [https://clicks.att.com/OCT/eTrac?EMAIL_ID=512501804&finalURL=https://m.att.com/my/#/verifyEmail?p=Pv3@gxl.Ni4_K_3_srBENk50u]
Heads up — we need a valid email for paperless billing. If you don’t confirm your email within 45 days of signing up, we’ll have to change your account status back to paper billing. You’ll also lose any paperless billing discounts.

Phishing Scam – 11/28/17 – Fwd: Announcement

The URL is blocked at the border and is already blocked by Trend. The web host was notified.

From: **** ******
Sent: Tuesday, November 28, 2017 5:11:48 PM (UTC-06:00) Central Time (US & Canada)
To: ****** ******
Subject: Announcement
This is a final notification to all Students, Staffs of  Kansas State University that we are validating active accounts.Failure to do this within 24 hours, your account will be disabled
Validate Email Account [http://www.nbgsara.ca/wp-includes/fonts/ksu/k-state.htm]
IT Help Desk
Office of Information Technology
Kansas State University

Phishing Scam – 6/12/17 – Please review your document Invoice 4524633 for ksu.edu

The URL has been sent to Trend. The web host was notified.

From: William Scott via DocuSign <william_scott@flexovitportal.com [mailto:william_scott@flexovitportal.com]>
Subject: Please review your document Invoice 4524633 for ksu.edu [http://ksu.edu]
Date: June 12, 2017 at 2:05:23 PM CDT
Your document is ready
REVIEW DOCUMENT [http://explorist.co.in/file.php?document=cmJhZXJAa3N1LmVkdQ==]

Your  Invoice 4524633 from ksu.edu [http://ksu.edu] for May Document is Ready for Signature.
Please review and sign your Invoice 4524633 from ksu.edu [http://ksu.edu] for May
 via DocuSign by clicking on the “Review Document” button above.  Signing will not be complete until you have reviewed the document and confirmed your signature.  Please contact us if you have any questions.  Thank you.
Powered by

Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.
Alternate Signing Method
Visit DocuSign.com [http://DocuSign.com], click ‘Access Documents’, and enter the security code:
About DocuSign
Sign documents electronically in just minutes. It’s safe, secure, and legally binding. Whether you’re in an office, at home, on-the-go — or even across the globe — DocuSign provides a professional trusted solution for Digital Transaction Management™.
Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly or replying to this email.
If you are having trouble signing the document, please visit the Help with Signing [https://support.docusign.com/en/knowledgeSearch?by=topic&topic=signing&product=all] page on our Support Center [https://support.docusign.com/].

Phishing Scam – 12/21/106 -FW: Your Apple ID information has been updated.

From: Apple
Sent: Wednesday, December 21, 2016 11:26 AM
Subject: Your Apple ID information has been updated.
Dear info@dancingdots.com,

The following changes to your Apple ID, were made on December 20, 2016 at 3:29:02 AM (GMT):
Zip Code
If you did not make these changes or you believe an unauthorized person has accessed your account, you should update your information as soon as possible from your Apple ID account page at My Apple ID <http://electricazteca.com/tmp/apple/index.html>.
Apple Support.

Reply-To Scam – 10/3/2016 – “Career Opportunities”

From: Office Contact
Sent: Monday, October 3, 2016 3:07 PM
Subject: Re: Career Opportunities

Special request to all students, with reasonable wages, three
fifty every week plus tips only on your class free time. Don’t
waste anymore time, hit me up with the stated requirement for
further details.
1.      Full name:
2.      City :
3.      Age :
4.      Major :
5.      Direct cell to contact you:
Make sure you respond only to the address stated here (
pstud510@gmail.com ), because if you send to any other you won’t
be contacted.
P. Stud