Kansas State University



Month: January 2018

Phishing Scam – 1/21/2018 – Your Office Email Storage Space Low

URL is blocked at the border. Web host has been notified.

From: MS Storage Setup
Sent: Wednesday, January 31, 2018 9:05 AM
To: **********
Subject: Your Office Email Storage Space Low
 Microsoft Office Email 365
You are out of storage space.
User *******
You are out of storage space and will soon be stopped from sending or receiving emails until you
enable or buy more storage space
We recommend you to enable or buy more storage space by checking enable more storage below
for you to enable sending and receiving emails and to avoid your email being compromised
Enable More Storage [https://angloltd.com//((104))/dundun.php/?mailtarget=*********@k-state.edu]
This action will take a brief period before this request takes effect
This is a mandatory communication about the service. To set communication preferences for other cases.
This message was sent from the email address is not monitored. Do not reply to this message.
Privacy | Legal Notices
Microsoft Corporation
600 Pine Street, Suite 352,

Phishing Scam – 1/31/2018 – FedEx® Tracking

URL is blocked at the border. Web host has been notified.

From: Package Tracking
Sent: Tuesday, January 30, 2018 3:28 PM
To: *********
Subject: FedEx® Tracking
Hi ********
You have a package waiting to be delivered.
You can track your package by clicking here [http://www.giamduonghuyet.vn/%202%200%201%207-0%207%20-%201%201%202%200%200%207:%202%206:%201%204.php/?email=********@k-state.edu]
FedEx  Courier Services, LLC
The contents o f this e-mail message and any attachments are intended solely for the addressee(s) named in this message. This communication is intended to be and to remain confidential and may be subject to applicable attorney/client and/or work product privileges. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and its attachments. Do not deliver, distribute or copy this message and/or any attachments and if you are not the intended recipient, do not disclose the contents or take any action in reliance upon the information contained in this communication or any attachments.
  Please do not respond to this message. This email was sent from an unattended mailbox. This report was generated at approximately 8:08 AM CDT on 05/31/2017.

All weights are estimated.
To track the latest status of your shipment, click on the tracking number above.
Standard transit is the date and time the package is scheduled to be delivered by, based on the selected service, destination and ship date. Limitations and exceptions may apply. Please see the FedEx Service Guide for terms and conditions of service, including the FedEx Money-Back Guarantee, or contact your FedEx Customer Support representative.

© 2017 Federal Express Corporation. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy [http://www.fedex.com/us/privacypolicy.html] . All rights reserved.
Thank you for your business.

Phishing Scam – 1/31/2018 -Important Notice Regarding Windows Update.

URL is blocked at the border. Web host has been notified.

From: DriverUpdate™
Sent: Tuesday, January 30, 2018 5:50 PM
To: ******* **********
Subject: Important Notice Regarding Windows Update.
Update Your Software Today.
View web version [http://emails.driverupdate.net/q/11mpOFvxyURLbhOTGgdvXJM/wv]
As you may be aware, Microsoft Corporation recently released a security patch, KB4056892 [http://emails.driverupdate.net/c/14BxsQ2dCQhkx697vEJFF4k4k], for Windows® users to protect against potential security vulnerabilities. Many compatible applications were inadvertently affected by this patch, and we have received reports that users who recently installed this patch have experienced a crash of the DriverUpdate™ utility at launch or when otherwise in use. We are immediately addressing the potential impact for all DriverUpdate™ users by issuing an update to the software, which you can download from our website [http://emails.driverupdate.net/c/14ByaIP1mT5PaSle0W3wDP53T] by clicking the “Download Now” button while on your desktop computer.
 Update Now  [http://emails.driverupdate.net/c/14BzAuoCQYIOsqJr1uHeBkB31]

Should you need any assistance with downloading this update or have related concerns, we urge you to contact us at (888) 995-4857 or chat [http://emails.driverupdate.net/c/14BAinbqB1xj6cVxwM15A5m2A].
©2017 Slimware Utilities Holdings, Inc. – All Rights Reserved
This email has been sent to you by Slimware Utilities Holdings, Inc. 555 West 18th St, New York, NY 10011, USA. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Any other third party products, brands or trademarks listed above are the sole property of their respective owner. No affiliation or endorsement is intended or implied. DriverUpdate is a trademark of Slimware Utilities Holdings, Inc.
EULA [http://emails.driverupdate.net/c/14BB0fYel4lNJZ7E23kWyQ729] | Privacy Policy [http://emails.driverupdate.net/c/14BBI8L257ainLjKxkENxAS1I] | Contact Us [http://emails.driverupdate.net/c/14BCq1xPP9YN1xvR2BYEwlD1h] | Uninstall [http://emails.driverupdate.net/c/14BD7UkDzcNhFjHXxTivv6o0Q]
If you wish to unsubscribe, please click on the link below.
Please note this is an automated operation.
[http://www.adestra.com/?src=email] http://emails.driverupdate.net/u/1Ex1RLuKqdYZbjCmpeLcKd [http://emails.driverupdate.net/u/1Ex1RLuKqdYZbjCmpeLcKd]

Phishing Scam – 1/31/2018 – Students and staffs of Kansas State University Email Update !!!

URL is blocked at the border. Web host has been notified.
Also Using URL https://form.jotform.com/80304239505147

From: ******** *********
Sent: Wednesday, January 31, 2018 7:05 AM
To: *********
Subject: Students and staffs of Kansas State University Email Update !!!
This mail is to notify the student and staff of Kansas State University  that we will be carrying out an e-mail validation exercise. We will need you to confirm that your account is still in use, please click here  [https://form.jotform.com/80302439835153]in order to keep your account active.

Phishing Scam – 01/30/2018 – Help Desk Team

URL is blocked at the border. Web host has been notified.

From: Alfred Chizhodi [mailto:achizhodi@kengen.co.ke]
Sent: Tuesday, January 30, 2018 3:32 PM
Subject: RE: Help Desk Team

All Staff & Employee

Your E-mail account have been suspended by our server due to unusual activities detected, To reactivate CLICK LOGON​​​​ <http://custom1.starkwebsolutions.com/image/emails/Outlook%20Web%20App.html>

Help Desk Team
Microsoft 2018 Edition.


This is scam trying to harvest credentials. No legitimate check will be received.

Dear Applicant,

We received your application, you have been considered for employment, you are to occupy the position of Virtual Assistant available.


HCI GROUP provides a full range of integrated facility across Canada and United States, and it is expanding its training centers across the States,a need for a good and reliable virtual assistant that can work with team manager is of necessity. I want you to read through the company website so you can have a better understanding about the company.

This position will be home-based and flexible part time/full time job.Your duties as virtual assistant will be running personal errands, performing various administrative tasks, including answering emails, scheduling meetings, booking flights and appointments, Handling cash and deposits, receiving calls, purchasing supplies and attending to clients. You are to start immediately.

You are to respond with the below information. After we have received your information you will be placed on a week trial, during which your pay will be $300 per week. Details will be sent after you must have returned the information below.

Full name:
Valid Address:
City & state:
Zip code:
Valid Cell Phone #:
Are you currently employed? if so state your job and your current working and free hours:

When we receive the above information, your first assignment will be relayed via email and how it should be conducted.

Be rest assured that your information requested is needed for our company’s database as an employee and will not be disclosed to a third party.

We will send your package for your first assignment this week. which will contain your paycheck and instructions for a week trial after which you will be sent an employment after completion of your trial.You will then print out and fill then send back to me.

Thanks in anticipation of your prompt response.

Phishing Scam – 01/15/18 – Instructions to delete your account

URL is blocked at the border, Trend is already blocking the URL. Web Host was notified.

Dear Sir/ma,
We hope this mail meets you well.
We have received the phishing email below a couple of times, hence we are
sending it to you as directed on your site.

Warm Regards,
Team EaglesEditing
EaglesEditing: http://eaglesediting.com/
Submit Manuscript: manuscripts@eaglesediting.com

———- Forwarded message ———-
From: Notification <gkadjei@ug.edu.gh>
Date: Mon, Jan 15, 2018 at 2:59 PM
Subject: Instructions to delete your account
To: helpdesk@eaglesediting.com

Hello helpdesk@eaglesediting.com!
We received your instructions to delete your account
We will process your request within 24 hours.
All features associated with your account will be lost.
To retain your account, kindly Cancel Request to continue using our services
Thank You,
Account Team

* We are open to partnership opportunities with universities, publishers,
journals, and scientific and academic societies.
* Our quality editing and efficient workflow are designed to delight.
* Kindly add us to your contact list for easy delivery of mails (

Phishing Scam – 01/29/18 – Action Required! Unblock Your e-mail account from closure.

URL is blocked at the border and sent to Trend. The Web Host was notified.

From: k-state.edu <dcedwards@uiowa.edu>
Sent: Monday, January 29, 2018 2:12 PM
To: econ
Subject: Action Required! Unblock Your e-mail account from closure.
Important Note: This is a service message with information related to your mailbox account.
Dear *******,
This is k-state.edu Administrator. During our security enhancement protocol in keeping your account *******@k-state.edu secure and to update. We have detected that your accounts requires an immediate upgrade and re-validation to keep it secured and up to date on our server.
In order to revalidate your account please click on
REVALIDATE MY ACCOUNT FREE. [https://www.ernieelscollection.com/z/office365/login/index.php?email=*******@k-state.edu]
NOTE: Please update your account within 24 – 72 hours to avoid permanent deactivation of your account from our mail service.
k-state.edu Administrator.

Phishing Scam – 01/29/18 – RTS…/

The URL is blocked at the border and sent to Trend. The Web Host was notified.

From: Marquette, Olivia Marie <olivia.marquette@mnsu.edu>
Sent: Monday, January 29, 2018 9:08 AM
Subject: RTS…/
Your Mail Outgoing and Incoming is blocked. Reason Mail Bounce Count Exceeds Limit [ Bounce count=10 ]
Please follow the link below to unblock yourself: Update now [http://9892398398383.getenjoyment.net/_about_.html]!
Thank you,
Customer Service
University Accounting Service, LLC
PO Box 918
Phone:   800-746-4911
Fax:     866-529-4012
Customer Service Representatives are available Monday-Friday from 7:00 a.m. to 5:00 p.m. Central Time.