Archive | March, 2018

NEW PART-TIME PERSONAL ASSISTANT POSITION, Scam (3-29-2018)

The following is a job offer scam in which the scammer is posing as an employer who is looking to hiring students. This scam will have the victim send thier resume over to the scammer and either be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from is not the same email where the scammer is requesting the resume be sent to. Both emails are not business emails and the email signature does not state which company they represent. Note that if someone was to offer a job opportunity they would use the business email.

If you have received this email please delete it.
—————————————————————————-

From: afuhrman@comcast.net
Date: Thu, Mar 29, 2018 at 2:34 AM
Subject: NEW PART-TIME PERSONAL ASSISTANT POSITION !!!
To: victim@vcu.edu

Personal Administrative Assistant Needed’

Qualifications:

1. Educational background is not a criteria.
2. You must be Organized and able to take instructions well Dependable, Reliable and Trustworthy.
3. Have great work ethic and attitude, as well as people skills, pay-attention to detail, capable of multi-tasking, and works well under stress at times.

Benefits:

– Basic wage is $400 per week

Also, there will be compensation for efficiency and hard working.
Send your resume to gayoungry@gmail.com for the job consideration.

Dr. Marion,

University Employment Team.

Comments Off on NEW PART-TIME PERSONAL ASSISTANT POSITION, Scam (3-29-2018)

New-Message, Scam (3-30-2018)

The following is scam in which the scammer is pretending that they have a document for the victim to view. The scammer attempts to exploit the victim’s trust in a third party application, in this case, DocuSign. The scammer is hoping that the victim will trust that the link leads to Docusign and will click.

Upon hovering over the link the victim can see that the link does not direct to DocuSign but rather another URL. If you are not expecting a document from the sender then do not click the link. Chances are high that it is a scam.

If you have recieved this email please delete it.
——————————————————————————–

From: EFax®8846623423@e-mmsg.com
Sent: Thursday, March 29, 2018 2:00 PM
To: victim@vcu.edu
Subject: [EXTERNAL] New-Message

You have a pending incoming document shared with you via DocuSlgn.

PO-Payment-DGP34901-pdf

Check-File (Malicious Link Removed)

————- ——————————————- —————————–
This is an automated message, please do not reply to this mail

Comments Off on New-Message, Scam (3-30-2018)

Warning scam (3/26/18)

The following scam attempts to use scare tactic to trick its victims into clicking on a malicious link. Notice the generic language, hidden link, and lack of mention of any service provider, all of these are tell tale signs of a scam. Please delete this message if you received it.

______________________________________

From: Soumendu S. Bhattacharjee <sbhaxxxxxxxx@triumf.ca>
Date: Mon, Mar 26, 2018 at 7:01 AM
Subject: Re: Warning
To: 



We are currently deleting all unused account to create spaces for new accounts. there are too many unused account to prevent your account from closed, you  to click the link below and sign in to back up your account and contact from been close.

for more security, CLICK HERE  (malicious link removed) And we’ll help you take corrective action.

©2018 outlook Administrator. All rights reserved.

Comments Off on Warning scam (3/26/18)

VCU Help, Scam (3-26-2018)

The following is a scam in which the scammer is posing as VCU Help Desk. The scam will have the victim believe that their account has been flagged as a possible compromised account and in order to verify that the victim’s account is not compromised they will need to click a link.

Some signs that this is a scam are, the non business emails, the random capitalization, and the poor grammar. VCU help desk will never email you from an account not part of the university and they will be using a service account. Look at the email address it is random and is not reputable, never trust an email if you are not expecting one from the sender. The email also attempts to scare the user into believe they will lose access to their account unless they click said link.

If you have received this email please delete it.
————————————————————————————————————–
From: Lesley Marisa 50787217@mylife.unisa.ac.za
Date: Mon, Mar 19, 2018 at 12:19 PM
Subject: VCU help
To: Victim@vcu.edu

Due to a recent email scam that has been going around the VCU, Most Student Self Service accounts have been compromised.

Your account access has been indefinitely revoked. Log on to VCU Self Service to have your account verified and reactivated now.

Click here to log on (Malicious Link Removed)

Thank you,

Help Desk

VCU

Comments Off on VCU Help, Scam (3-26-2018)

Package Delivery Delay, Scam (3-26-2018)

The following is a scam where the scammer poses as a package delivery representative. The scam involves alerting the victim that a package meant for them is delayed. In order to see the updated information on their package the victim needs to click a link.

Some signs that this is a scam are the fact that; the user is not expecting a package, the scammer is emailing from a non-business email, and the name on the email is not the same as the email signature. The email signature claims to be from an automated system yet uses a personal account instead of a service account. All of these are signs that this is a scam.

If you have received this email please delete it.
————————————————————————————————————————————————————
From: “Amanda.Cheyanne@usmillaw.us” Amanda.Cheyanne@usmillaw.us
Subject: [EXTERNAL] Package Delivery Delay
Date: 26 March 2018 10:33
To: “Victim”

Dear Sir/Madam

Your package has been delayed.

Please click on the tracking number to see its new delivery date

Tracking New Delivery Date ( MALICIOUS LINK REMOVED)

Thanks,

M.Goodwin

(DX Logistics Manager)

(Please do not reply to this message, it is an automated system)

Comments Off on Package Delivery Delay, Scam (3-26-2018)

[WARNING : ENCRYPTED-NOT A/V SCANNED] Attached Resume (03/26/2018)

The Following email attempts to trick the recipient into opening a malicious word document. If you get this email please delete it.

________________________________

 

From: James Johnson <hpvrwcvl@www.catsanddogs.co.za>
Date: Sun, Mar 25, 2018 at 10:37 PM
Subject: [WARNING : ENCRYPTED-NOT A/V SCANNED] Attached Resume
To: victim@vcu.edu

Hi,
I am absolutely interested in a job.

Find my attached resume and reply ASAP.

The file is password protected to protect against identity theft. The password is “resume”

Looking forward to hearing back from you!

Comments Off on [WARNING : ENCRYPTED-NOT A/V SCANNED] Attached Resume (03/26/2018)

Package Delivery Delay, Scam (3/23/2018)

The following is a scam where the scammer poses as a package delivery representative. The scam involves alerting the victim that a package meant for them is delayed. In order to see the updated information on their package the victim needs to click a link.

Some signs that this is a scam are the fact that; the user is not expecting a package, the scammer is emailing from a non-business email, and the name on the email is not the same as the email signature. The email signature claims to be from an automated system yet uses a personal account instead of a service account. All of these are signs that this is a scam.

If you have received this email please delete it.
———————————————————————————————————————————

From: Mark.fulert@businessdesc.info
Sent: Friday, March 23, 2018 9:26 AM
To: Victim
Subject: [EXTERNAL] Package Delivery Delay

Dear Sir/Madam

Your package has been delayed.

Please click on the tracking number to see its new delivery date

Tracking New Delivery Date (MALICIOUS LINK REMOVED)

Thanks,

M.Goodwin

(DX Logistics Manager)

(Please do not reply to this message, it is an automated system)

Comments Off on Package Delivery Delay, Scam (3/23/2018)

Review, Scam (3/20/2018)

The following is a scam in which the scammer sends over a malicious attachment. In this case the link is framed to be a DocuSign document which requires the victim’s signature.

The link is loaded with malware and will steal the victim’s personal information such as passwords, bank accounts, social security number. The scammer will use this information to open credit cards in the victim’s name.

The emailer is not emailing from their business email. The victim was not expecting an email from said company either. Also the scammer is posing as a a famous visual effects artist who is also a founding member of the company. All of these are signs that this is a scam.

If you have received this email please delete it.
————————————————————————————————————————
From: Jonathan Erland jmerland@pacbell.net
Date: Mon, Mar 19, 2018 at 7:49 PM
Subject: Review
To: victim@vcu.edu

Hi,

I have shared some document with you via DocuSign
you can access them anytime below.
View & Review Doc
(Malicious link Removed)

Thank You

DocuSign

Jonathan Erland
Composite Components Company
(323) 257-1163

Comments Off on Review, Scam (3/20/2018)

****EMPLOYMENT FOR STUDENT****/ Part Time Position for students, Scam (3/20/2018)

These scammers are quite persistent! We’ve been getting tons of reports of phishing, which is good! Please keep sending them our way at infosec@vcu.edu or spamalert@vcu.edu so that we can continue to warn others who receive the message.

The scammers have stepped up their game recently, they are starting to employ other tactics to fool victims into submitting their information to the scammers. They will employ tactics such as email spoofing, they have been known to spoof the careerservice@vcu.edu account as well as using fake edu accounts (Example will be shown later in the post). They have also resorted to put up a replicate of our website’s login information to gather credentials. Please be extra careful with links- Always hover over them to see where they lead. Also be careful with any emails from senders that you do not know or are expecting a letter from.

For this email please notice the strange email address while it uses an .edu it also is a .edu.au address (Not the same as a .edu). Also note that while you may trust a .edu email the person who owns that account could have been compromised so the e-mailer could actually be a scammer, despite coming from your best friend’s email address. The scammers have also added a disclaimer in the email footer in an attempt to appear more legitimate.

Please understand that no reputable organization will offer a job without an interview. If an offer seems too good to be true it often is. Please delete this email if you have received it.
———————————————————————————————————————————
From: Jodie Gausden (jgausden@utas.edu.au)
Date: Tue, Mar 20, 2018 at 6:16 AM
Subject: Part Time Position For Student
To: victim@vcu.edu

I am Dr. John Largen and I work as a clinical counselor for the department of Disability Resources and Educational Services (DRES). I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible)registered with DRES. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatric disabilities and need mental health support to be successful at the university. In addition,many University of students with academic difficulties and no prior diagnosis are seen and assessed through the academic screening and assessment process. I also am the director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at DRES and APA-accredited school psychology pre-doctoral interns.You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.This is a very simple employment.

You will only help me Mail letters, Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia.

You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of April 2018

To Apply, Please email your Full name, Address, Alternate email (different from school email) and mobile

Email me back as soon possible

University of Tasmania Electronic Communications Policy (December, 2014).
This email is confidential, and is for the intended recipient only. Access, disclosure, copying, distribution, or reliance on any of it by anyone outside the intended recipient organisation is prohibited and may be a criminal offence. Please delete if obtained in error and email confirmation to the sender. The views expressed in this email are not necessarily the views of the University of Tasmania, unless clearly intended otherwise.

Comments Off on ****EMPLOYMENT FOR STUDENT****/ Part Time Position for students, Scam (3/20/2018)

Yet another job scam (3/20/18)

Please note that there is yet another job scam. Notice the offer of a job prior to any formal application or interview, the unknown email address, and the unknown sender’s address. All of these are signs of a scam. Please delete this message if you received it.

____________________________________________

From: Alper TOPBAŞ <atopbas@anadolu.edu.tr>
Date: Tue, Mar 20, 2018 at 5:21 AM
Subject: Re: Campus Career opportunities available
To:

I am Dr. Neil Roberts. I specialize in arthroscopic surgery, sports medicine, trauma and fractures, and athletic injuries to the shoulder, elbow, and foot and ankle. I also have an interest in shoulder and knee replacement procedures. I am the team physician for Northwest University in Kirkland. I also served as team physician for the US Women’s U20 National soccer team and other professional sports including hockey, golf and tennis. I am also involved with local high school and club sports teams. In addition, I am a consultant for Cirque du Soleil.
I’m dedicated to helping each of my patients gain maximum function and physical potential through individualized patient education and cutting-edge surgical and non-surgical treatment of musculoskeletal conditions. The most important part of my relationship with my patients is being a good listener. I learn so much from patients just listening and learning about their lives.
You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.
 This is a very simple employment. You will only help me Mail letters, Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.
 I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of April 2018
 To Apply, Please email your Full name, Address, Alternate email (different from school email) and mobile to :- Dr.robs@aol.com
   and a correspondent will reply you as soon as possible.
Regards,
Neil E Roberts, MD
Comments Off on Yet another job scam (3/20/18)