Archive | December, 2016

Security warning scam (12/13/16)

The following scam attempts to trick its victim into clicking on a malicious link, which will subsequently steal the individuals’ login credentials. Notice the non-VCU sender’s email address, non-VCU link, and the sense of urgency conveyed in the message; all of which are tell tale signs of a scam. Please delete this email if you received it.


From: Forbes, Christopher []
Sent: Tuesday, December 13, 2016 9:04 AM
Subject: [EXTERNAL] Information Service



This is to notify you that IT desk has detected several attempts to access your email account from an unrecognized device.
Host name : Verizon

IP Address :

Unrecognized Location : Paris

December 13, 2016,

ISP : Private


If this was you kindly ignore this message.


If you did not, we encourage you to Review (Malicious link removed)


your account to save your current IP in our database, as this will improve increase security in your email account and against any virus or spam content by email sent to you.




Office of the director
Information technology service
Virginia Commonwealth University



Copyright © 2016  •


Do not reply as this is an automated message.

Comments Off on Security warning scam (12/13/16)

Money transfer scam (12/9/16)

The following scam attempts to trick its victims into responding and subsequently setting up a direct deposit or money transfer to the scammer. These scams are very targeted and are usually sophisticated with very little signs of it being a scam. When you receive emails asking you to transfer money or make payments on behalf of VCU, it is always good to check with the requesting individual by phone, or send it to the Information Security Office for verification first before executing.


Date: Wed, Dec 7, 2016 at 12:06 PM
Subject: [SUSPECTED SPAM]VCU XXXXX Financial Report


I trust this e-mail finds you well, I need you to set up a bank transfer payment. do you have few minutes to process the transaction? I will send you the banking details upon your request. can you send me the bank statement/available balance in the current account.


Virginia Commonwealth University
Richmond, Virginia 23284
Comments Off on Money transfer scam (12/9/16)

Fraudulent charge scam (12/7/16)

The following scam attempts to trick its victims into opening a malicious and encrypted attachment. The password to open the attachment is included in the scam email. When opened, the attachment will attempt to download Ransomware onto the victims’ computers and demand a ransom to be paid to decrypt the information. Please note the generic email address,  generic message, scare tactic used in the message, and an unknown attachment; all of which are tell tale signs of a scam. If you received this email, please delete it.


From: Regan Stamdifer []
Sent: Sunday, December 04, 2016 6:09 AM
Subject: FWD hartmaf


Hello hartmaf


You are going to be billed $ 2,542.04 on your personal Visa card right away.

Go through attachment to avoid it.

Password to view the attachment is 7778.


Best regards,



[Attachment was an encrypted Microsoft Word Doc titled Scan_hartmaf.doc]

Comments Off on Fraudulent charge scam (12/7/16)