Archive | April, 2018

Password Reset, Scam (4-17-2018)

The following is a scam in which the scammer is impersonating a password reset that the user did not request. The scam will bring the victim to a page to reset their password which will be used to steal the user’s credentials. You can tell this is a scam because the reset was not requested. Do not reset your password if you have not requested the service to reset your password! Also the URL behind the link is completely different.

If you have received this email you can safely delete and ignore it.
————————————————————————————————————-

From: Do Not Reply donotreply@webadmit.org
Date: Tue, Apr 17, 2018 at 2:55 PM
Subject: Password reset
To: Victim victim@vcu.edu

Dear Victim,

Your username for WebAdMIT is victim@vcu.edu

You can set a new password by following this link:

http://current.webadmit.org/password_resets/w2lpxXT1MXiL5Edqleffd/edit (Malicious Link Removed)

This link expires in 24 hours. If you need another password reset link, click the “Forgot username or password?” link on the WebAdMIT login screen.

If you have questions, please contact your WebAdMIT Support Team.

Please do not reply to this automated message

Leave a Comment

[EXTERNAL]Package Delivery Delay, Scam 4-11-18

The following is a scam where the scammer poses as a package delivery representative. The scam involves alerting the victim that a package meant for them is delayed. In order to see the updated information on their package the victim needs to click a link.

Some signs that this is a scam are the fact that; the user is not expecting a package, the scammer is emailing from a non-business email, and the name on the email is not the same as the email signature. The email signature claims to be from an automated system yet uses a personal account instead of a service account. All of these are signs that this is a scam.

If you have received this email please delete it.
—————————————————————————-

From: Patrick@richmondrep.us
Subject: [EXTERNAL] Package Delivery Delay
Date: April 11, 2018 at 9:50:54 AM EDT
To: Victim@vcuhealth.org

Dear Sir/Madam

Your package has been delayed.

Please click on the tracking number to see its new delivery date

Tracking New Delivery Date

Thanks,

M.Goodwin

(DX Logistics Manager)

(Please do not reply to this message, it is an automated system)

Comments Off on [EXTERNAL]Package Delivery Delay, Scam 4-11-18

New Email System 2018

The following is a scam in which the victim is being informed that VCU has decided to go with a new email system. The user will need to either postpone the change or opt-out completely, both links are provided. In actuality both links are a scam. Upon clicking the links the scammer will steal the victim’s information or infect the victim’s machine with malware.

Some signs this is a scam are; the email change is unannounced on VCU’s Technology Site (https://ts.vcu.edu/), there is no announcement to back up the statement of a new email system. The email address in which the sender is using is not a service account, the email signature doesn’t match up to email address. All of these are signs of a scam.

If you have received this email please delete it.
——————————————————————————————————————————————
From: adbarnes@richmondrep.us
Date: Mon, Apr 9, 2018 at 11:01 AM
Subject: New Email System 2018
To: Victim@vcu.edu

Congratulations Faculty/Staff Member,

You have been randomly selected to beta test VCUs new email system. This new system provides many new and exciting features that we are excited about. This includes the abilities to recall emails with errors as well as notify you when sent email is read by the recipient. Unfortunately, due to our current contract, old email will not be transfered into the new system. Your account will automatically convert at the end of business today. If you would like to postpone this transition or opt-out, please click one of two links below.

Click here to Postpone (3 days) (Malicious Link Removed)

Click here to Opt-out (Malicious Link Removed)

Sincerely,

VCU Technology Services

Comments Off on New Email System 2018

[EXTERNAL], Scam 4/9/2018

The following is a scam in which the scammer sends a link over to the victim hoping that they click the link. Upon being clicked the scammer will attempt to steal user information or infect the victim’s machine with malware.

Some signs that is is a scam are the fact that the victim did not know the scammer nor recognize the address. Another sign is that the email only has the malicious link, which in this case has been masked with google URL shortener. Never trust an email from someone you don’t know.

If you have received this email please delete it.
—————————————————————————————————————————–
From: I R [mailto:karen@websiteassistant.co.uk]
Sent: Saturday, March 31, 2018 7:36 PM
To: Victim
Subject: [EXTERNAL]

Good evening Victim https://goo.gl/(MALICIOUS URL REMOVED) I R

This message was secured by Zix(R).

Comments Off on [EXTERNAL], Scam 4/9/2018

RE: Invoice, Scam (4-6-2018)

The following is a scam in which the scammer pretends that they have a package for the victim. The package which was meant to be delivered to the victim accidentally got sent to the scammer instead. The scammer has included a link to a photo of the package.

Upon clicking the link, the scammer will be able to infect the victim’s machine and thus steal information of the victim. Using this information the scammer can access the victim’s accounts including banks, work, email, etc.

Some signs that this is a scam are the non-business email. The email address and the email signature are not the same. If you are not expecting a package there is no reason to trust this email that you have one waiting for you.

If you have received this email please delete it.
———————————————————————————————————————-
From: Amanda@businessdesc.info
Date: Thu, Mar 15, 2018 at 10:28 AM
Subject: RE:Invoice
To: victim@vcu.edu

Hi,

A package was delivered to us by mistake…..I think

I opened the box and noted that your email was on the invoice…coming up to Christmas I thought it might be personal or work related.

We are just down the road by the Mcdonalds. I can drop it by if you will be in this afternnon?

I took a picture of the invoice, I can’t make out the name but you can clearly see your email address

Picture of Invoice (Malicious Link Removed)

Sincerly,

Wendy Mcguire

Sales Representative

Ashley and Mullins Law Firm LLC

Comments Off on RE: Invoice, Scam (4-6-2018)

Google Docs, Scam (4-5-2018)

The following is a scam in which the scammer has a document waiting for the victim. This document as you may realize is not actually a document but a trap that the scammer has set up. Once clicked the scammer will steal the victim’s information and use it for nefarious purposes.

Notice that the link the scammer gives is a not a shared link from Google Docs. If you receive email from people you do not know, do not trust the email.

If you have received this email please delete it.
———————————————————————————-
From: Mark.Anthony@cloudevolution.us
Date: Mon, Mar 12, 2018 at 12:41 PM
Subject: Google Docs
To: victim@vcu.edu

I’ve shared a couple of documents with you via Google Docs.

162.209.3.163:80 (Note: this IP is not where the link leads, instead it leads somewhere else)

Comments Off on Google Docs, Scam (4-5-2018)

Low Storage Space – Email Notification, scam (4-5-2018)

The following is a scam in which the scammer is pretending to be a email solution that the victim is using and has run out of space. It will require the user to click on a link in order to fix their email storage settings.

Notice that the email is not from a service account, does not mention which service it represents. And the misspellings in the email. All of these are signs of a scam.

If you have received this email please delete it.
————————————————————————————————–
From: Mark.A@businessdesc.info
Date: Mon, Apr 2, 2018 at 10:28 AM
Subject: Low Storage Space – Email Notification
To: victim@vcu.edu

Your E-mail box is reacheing its maximum limit of storage and Your account will be disabled if you do not update now. Follow the instructions to upgrade to more storage space Your account will remain active after you have confirmed your account successfully.

Email Server Settings ( MALICIOUS LINK REMOVED)

Mail Server Administrator

Comments Off on Low Storage Space – Email Notification, scam (4-5-2018)

Job Available For Student!!!Fixed-Term (PART-TIME) FACULTY POSITIONS, Scam (4-5-2018)

The following is a job offer scam in which the scammer is posing as an employer who is looking to hiring students. This scam will have the victim send thier resume over to the scammer and either be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from is not the same email where the scammer is requesting the resume be sent to. Both emails are not business emails and the email signature does not state which company they represent. Note that if someone was to offer a job opportunity they would use the business email.

The body of this email is empty but there is a text document attached with information; this information has been posted below. If you have received this email please delete it.
——————————————————————————————
From: Giada Sami
Date: Wed, Apr 4, 2018 at 10:35 PM
Subject: Job Available For Student!!!Fixed-Term (PART-TIME) FACULTY POSITIONS
To: victim@vcu.edu

I am Dr Williams Morgan and I work as a clinical counselor for the department of Disability Resources and Educational Services . I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible)registered with Disability Resources and Educational Services. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatric disabilities and need mental health support to be successful at the university. In addition,many University of students with academic difficulties and no prior diagnosis are seen and assessed through the academic screening and assessment process. I also am the director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at Disability Resources and Educational Services and APA-accredited school psychology pre-doctoral interns.You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.This is a very simple employment. You will only help me Mail letters, Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia.
You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of April 2018
To Apply, Please email your Full name, Address, Alternate email (different from school email) and mobile
To::::::officialsupervisor657@gmail.com

Dr Williams Morgan
Clinical Counselor
Disability Resources and Educational Services(DRES)

Comments Off on Job Available For Student!!!Fixed-Term (PART-TIME) FACULTY POSITIONS, Scam (4-5-2018)

Package Delivery Delay, Scam (4-4-2018)

The following is a scam where the scammer poses as a package delivery representative. The scam involves alerting the victim that a package meant for them is delayed. In order to see the updated information on their package the victim needs to click a link.

Some signs that this is a scam are the fact that; the user is not expecting a package, the scammer is emailing from a non-business email, and the name on the email is not the same as the email signature. The email signature claims to be from an automated system yet uses a personal account instead of a service account. All of these are signs that this is a scam.

If you have received this email please delete it.
————————————————————————————————————————————————————
From: Megan.Boll@virginialaw2.us [mailto:Megan.Boll@virginialaw2.us]
Subject: [EXTERNAL] Package Delivery Delay
Date: 04 March 2018 8:25 AM
To: “Victim”

Dear Sir/Madam

Your package has been delayed.

Please click on the tracking number to see its new delivery date

Tracking New Delivery Date ( MALICIOUS LINK REMOVED)

Thanks,

M.Goodwin

(DX Logistics Manager)

(Please do not reply to this message, it is an automated system)

Comments Off on Package Delivery Delay, Scam (4-4-2018)