Archive | March 12, 2018

Payment scam (3/12/18)

The following scam attempts to trick an employee into a fraudulent wire transfer by pretending to be a high ranking official requesting such transfer, Notice the non-VCU email used and the request for wire transfer to an account in another state; both are tell tale signs of a scam. Individuals receiving these types of requests should always confirm the request with the requester in person or via a known phone number before processing. Please delete this message if you received it.

________________________________________

From: XXXXXX XXXXX [mailto:presidentxxxxx20018@comcast.net]
Sent: Friday, March 9, 2018 3:15 PM
To: XXXXX, Michelle
Subject: RE: Michelle XXXX Expense Reimbursement

 

Michelle,Here is the details you need in mailing the check to the recipient. I would appreciate if you can make the payment Via USPS Express Mail Delivery. I will forward the receipt to you once am back from my trip.

Name: Arturo Flores
Address: 104 SE 4th St
City: Gilmore City
State: Iowa
Zip Code: 50541
Amount:$3,300

 

Thanks
XXXXXX

Sent from my iPhone

 

Comments Off on Payment scam (3/12/18)

Important Massage – Scam (3/12/18)

The following is a scam that poses as a update from DropBox that someone has shared a new document for them to view. This scam would have the user download an attachment which emulates a login page. If the victim was to put their credentials into the emulated page the scammers then would have access to the victim’s account.

Some indicators that this is a scam is are the fact that the email address used is not from Dropbox,  the email is not addressed to the individual rather using a generic “user” greeting, and the obvious typo of “Important Massage”.

If you have received this email please delete it .


From: Admin nxxxx@metromarketing.bz
Date: Sat, Mar 10, 2018 at 9:38 AM
Subject: Important Massage
To: Victim@vcu.edu

Dear User

You have a new massage via Dropbox Massage Center
==============================

Administrator has invite you to view the folder “UPDATE” on DropBox

Download File and login to view update :

Enjoy!
The Dropbox Team

 > MALICIOUS ATTACHMENT REMOVED
Comments Off on Important Massage – Scam (3/12/18)

RE: Victim’s Expense Reimbursement – Scam (3/12/18)

Today’s scam is a unique targeted phish (spear-phish) at someone who is not a member of our school but admin of another school. For this scam, the scammer impersonated a member of our school to request a money transfer to themselves. In this case, the person whom this email was sent to believe it to be suspicious, rightly so, and emailed the person it was impersonating asking to confirm. Once the impersonated person (hereby referred to as victim) received the email asking for confirmation, they emailed back that this was not them.

Because this phish is more complicated than a mass spam email, it can be more difficult to distinguish. One of the indicators that tipped off the recipient of the email that this email was not legitimate was the non-business mail (email was sent from a comcast.net email address) and the poor grammar (lack of space after comma,”Here is” instead of here are, “once am back” instead of once I am back) and the fact that the person is requesting money via email instead of the appropriate channel for submitting reimbursement charges. Those are somethings that can tip you off that an email is a scam.

If you receive a suspicious email from someone that you know please check with them via Phone call or another email or any other method (besides emailing back the address!) If you do happen to receive this email please delete it!
————————————————————————————————————–

From: VCU Victim [mailto:pxxxxxxxmail20018@comcast.net]
Sent: Friday, March 9, 2018 3:15 PM
To: Other School Victim
Subject: RE: VCU Victim Expense Reimbursement

Other School Victim,Here is the details you need in mailing the check to the recipient. I would appreciate if you can make the payment Via USPS Express Mail Delivery. I will forward the receipt to you once am back from my trip.

Name: Axxxx Fxxxx
Address: 1xx 4th St
City: Gilmore City
State: Iowa
Zip Code: 50541
Amount:$3,300

Thanks
VCU Victim

Sent from my iPhone

*email has been edited to remove details of victims

Comments Off on RE: Victim’s Expense Reimbursement – Scam (3/12/18)