Archive | Uncategorized RSS feed for this section

Fund transfer scam (8/23/17)

The following sam attempts to trick an employee into responding to the scammer to setup a fund transfer. Notice the scammer pretends to be a high ranking University official but is sending the email from an unknown email address. This is a tell tale sign of an initial hook in these types of scams. If you receive suspicious messages like this, then it is always good to verify with the actual person over the phone before proceeding.

____________________________________

From: XXXXXXX XXXXXXX <admin@hibxxxxxxxers.com>
Date: Wed, Aug 23, 2017 at 12:18 PM
Subject:
To:

Jackie ,

Do you have a min ? I need you to take care of something for me .

Regards.

XXXXXXX XXXXXX, Ph.D.
DEAN

Leave a Comment

Image scam (8/22/17)

The following scam attempts to trick its recipient into clicking on a shortened link, which will then attempt to infect the victims’ computer. Notice the non-descriptive message and the shortened link; both are signs of a scam. Please delete this message if you received it.

______________________________________

From: XXXXXXXXer <jkxxxxxxxer@gmail.com>
Date: Mon, Aug 14, 2017 at 7:56 PM
Subject: [SUSPECTED SPAM]Check out this image
To:

https://goo.gl/images/vxXxxx (malicious link removed)

Sent from my iPad

Leave a Comment

Floral request scam (8/21/17)

The following scam attempts to trick its victims into clicking on a link; which is designed to harvest the victims’ credentials. Notice the unknown sender, generic message, masked link, and the weird URL; all of which are tell-tale signs of a scam. Please delete this message if you received it.

______________________________________
From: <Richard@bxxxxxxxesc.info>
Date: Mon, Aug 21, 2017 at 4:11 PM
Subject: Floral Request
To:

Good Morning,

I work in ‘Friendly Floral’, next to the BB&T Bank and we recieved a request, that we think, is for you. Unfortunately for us, the voicemail that left the delivery was not very clear. We called the front desk and they gave us your email. The closest name and address matches you, so I thought i would email you first to see if you recognize the name and address of the sender.

Click here (malicious link removed)

Leave a Comment

HelpDesk scam (8/18/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently attempt to steal the user’s credentials; notice the generic language, non-VCU sender’s email address, sense of urgency, and the non-VCU link; all of which are signs of a scam. Please delete this message if you received it.

________________________________

From: Aaron Lim <aarxx.xxx@vcuhealth.org>
Date: August 18, 2017 at 8:58:35 PM EDT
Subject: HelpDesk


All Staffs and Students are expected to migrate to the New 2017 Microsoft Outlook Web portal to access the below, 
click here (Malicious link removed) to migrate:

·    Access the new staff directory

·    Access your pay slips and P60s

·    Update your ID photo

·     E-mail and Calendar Flexibility 

·    Connect mobile number to e-mail for voicemail 

 

Important notice:  All staffs and students are expected to migrate within 24 hours to avoid delay on mail delivery.

 

On behalf of IT Support. This is a group email account and its been monitored 24/7, therefore, please do not ignore this notification, because its very compulsory. 
 
Sincerely.
Admin Team.

 

Leave a Comment

Facebook scam (8/14/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently attempt to steal the victims’ information. Notice the non-Facebook sender’s email, the non-Facebook link; all of which are tell-tale signs of a scam. Please delete this message if you received it.

_______________________________

From: <Barabara.xxxxxx@xxxxxxxxxxts.us>
Date: Aug 14, 2017 2:51 PM
Subject: Did you attempt to log into my facebook by accident?
To:
Cc:

Was this you …..?

We have detected an unauthorized login attempt. 10 or more incorrect passwords in a row were attempted. Please log int to veify any changes.

16x.2xx.x.16x:80/InvalidAttempt

Comments Off on Facebook scam (8/14/17)

Employment scam (8/14/17)

The following scam attempts to trick its victims into contacting the sender back; which will subsequently lead to some form of fraud. Notice the generic email, the too-good-to-be-true message, and the simple fact that the scammer is freely soliciting “job opportunities” from a gmail address; all of these are signs of a scam. Please delete this message if you received it.

___________________________________________

From: xxxxxxxxxxone5@gmail.com

To:

Date: 8/12/2017 8:46 AM

Subject: HERE IS AN IMMEDIATE PART-TIME PERSONAL ASSISTANT POSITION*** APPLY NOW !!!

    Seeking a part-time administrative assistant to perform various administrative tasks, organizing files, and processing billing paperwork. An ideal candidate, Self-Motivated, Eager and Computer skills are preferred. Experience is not necessary.
 To send your resume for consideration and full job details, CLICK HERE! (Malicious email address removed)

Nasita S. Kones.

Project Manager,

University Employment Team.
Comments Off on Employment scam (8/14/17)

Weird message scam (8/3/17)

The following scam attempts to trick you into clicking on a malicious link. The scammers in this case attempts to use an odd looking message to lure curious recipients into clicking on a link. Notice the non-VCU sender’s email address, the non-VCU link, and the general weird message; All of them are signs of a scam. Please delete this message if you received it.

______________________________________

From: <EXXXXXXX.M@cloxxxxxxxtion.us>
Date: Thu, Aug 3, 2017 at 9:55 AM
Subject: S\00c\00a\00n\00n\00e\00d\00 \00I\00m\00a\00g\00e\00 \00f\00r\00o\00m\00 \00a\00 \00H\00P\00 \00D\00i\00g\00i\00t\00a\00l\00 \00D\00e\00v\00i\00c\00e
To:

Please open the attached document. This document was digitally sent to you using an HP Digital Sending device. To view this document you need to use the Adobe Acrobat Reader.

HP Digital Sender (Malicious link removed)

Comments Off on Weird message scam (8/3/17)

Bank transfer scam (8/3/17)

The following scam attempts to trick its recipient into replying with banking information. Notice the non-VCU sender’s email address and unusual message. Please delete this message if you received it.

______________________________________

From: XXXXXX X. XXXXXX <hon666@inbox.lv>
Date: Thu, Aug 3, 2017 at 10:48 AM
Subject: RE: Follow up!!!
To:

 Erin,

​Does the bank Charge us same amount for Standard wire and ACH payment? What details do you need for ACH payment?

Regards

XXXXXX X. XXXXXX (This is the name of some high ranking VCU official)

Sent from my iPad

Comments Off on Bank transfer scam (8/3/17)

DocuSign scam (8/1/17)

The following scam attempts to trick its recipient into clicking on a malicious link, which will subsequently steal the victim’s information. Notice the unknown external sender’s email address. generic language, and the generic link. To see where a link is taking you, please remember to hover your mouse over the link if you are using a computer, or tap and hold the link if you are using a smartphone. Examining the link before clicking on them will reduce the likelihood of you falling victim to these scams.

________________________________________

From: XXXXXX@businessXXX.info

To:

Date: Tues, 8/1/2017 2:34 PM

Subject: [EXTERNAL] Update Required

 

You have a document waiting from:

Daxxxxxx Maxxxxxxx

Please sign the below document

HR_Update_Form (Malicious link removed)

Comments Off on DocuSign scam (8/1/17)

Reception Scam (7/26/17)

The following scam attempts to trick its victims into clicking on a link. Notice the unknown sender, generic language, and the masked, non-VCU link; all of these are tell-tale signs of a scam. Please delete this message if you received it.

___________________________________

From: <F.Rayser@cxxxxxxxxxelay.us>
Date: Wed, Jul 26, 2017 at 16:57
Subject: Reception
To:

 

A beautiful bunch of flowers has been delivered, but I am unable to read the card. I took a picture of it…anyone recognize it?

Click here

Comments Off on Reception Scam (7/26/17)