Archive | Uncategorized RSS feed for this section

Bank transfer scam (8/3/17)

The following scam attempts to trick its recipient into replying with banking information. Notice the non-VCU sender’s email address and unusual message. Please delete this message if you received it.

______________________________________

From: XXXXXX X. XXXXXX <hon666@inbox.lv>
Date: Thu, Aug 3, 2017 at 10:48 AM
Subject: RE: Follow up!!!
To:

 Erin,

​Does the bank Charge us same amount for Standard wire and ACH payment? What details do you need for ACH payment?

Regards

XXXXXX X. XXXXXX (This is the name of some high ranking VCU official)

Sent from my iPad

Comments Off on Bank transfer scam (8/3/17)

DocuSign scam (8/1/17)

The following scam attempts to trick its recipient into clicking on a malicious link, which will subsequently steal the victim’s information. Notice the unknown external sender’s email address. generic language, and the generic link. To see where a link is taking you, please remember to hover your mouse over the link if you are using a computer, or tap and hold the link if you are using a smartphone. Examining the link before clicking on them will reduce the likelihood of you falling victim to these scams.

________________________________________

From: XXXXXX@businessXXX.info

To:

Date: Tues, 8/1/2017 2:34 PM

Subject: [EXTERNAL] Update Required

 

You have a document waiting from:

Daxxxxxx Maxxxxxxx

Please sign the below document

HR_Update_Form (Malicious link removed)

Comments Off on DocuSign scam (8/1/17)

Reception Scam (7/26/17)

The following scam attempts to trick its victims into clicking on a link. Notice the unknown sender, generic language, and the masked, non-VCU link; all of these are tell-tale signs of a scam. Please delete this message if you received it.

___________________________________

From: <F.Rayser@cxxxxxxxxxelay.us>
Date: Wed, Jul 26, 2017 at 16:57
Subject: Reception
To:

 

A beautiful bunch of flowers has been delivered, but I am unable to read the card. I took a picture of it…anyone recognize it?

Click here

Comments Off on Reception Scam (7/26/17)

MAILBOX LOGIN Alert 7/26/17

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_________________________________________________________

From: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>
Date: Wed, Jul 26, 2017 at 11:08 AM
Subject: Re: ADMIN
To: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>

YOUR MAILBOX HAS BEEN LOGIN SOMEWHERE ELSE CLICK-HERE​ TO CHANGE LOGIN DETAILS.

Comments Off on MAILBOX LOGIN Alert 7/26/17

VCU message scam (7/24/17)

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_____________________________

From: XXXXX, MXXXXX <xxxxxx@wright.edu>
Date: Sat, Jul 22, 2017 at 11:33 AM
Subject: IT Support Center | VCU Technology Services
To:

Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.
regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly ow.ly/sXopxxxxxxpV (Shortened and malicious URL removed)
© 1996-2016 Virginia Commonwealth University. All rights reserved. Last updated: 07/22/2017
Maintained by VCU Technology Services
Comments Off on VCU message scam (7/24/17)

Deactivation scam (7/22/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently steal the victim’s account information. Notice the non-VCU email address, generic language, and the masked foreign link; all of which are signs of a scam. Please delete this message if you received.

———————————————————————————————————————————
From: Dover, Milana Kreail <dover.10@wright.edu>
Date: Sat, Jul 22, 2017 at 11:25 AM
Subject: IT Support Center | VCU Technology Services
To:
Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.

regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly (Malicious link redacted)

Comments Off on Deactivation scam (7/22/17)

Deactivation scam (7/21/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently steal the victim’s account information. Notice the non-VCU email address, generic language, and the masked foreign link; all of which are signs of a scam. Please delete this message if you received.

___________________________

From: Server [mailto:d.xxxxxx@best1tire.com]
Sent: Friday, July 21, 2017 1:31 PM
To:
Subject: [EXTERNAL] Your request is being processed

 

Hello xxxxxxx,

Notice! A Request to deactivate your  office email xxxxxxxx@vcuhealth.org was made and this request will be processed shortly before 24hrs.

If this was made accidentally, you are advised to cancel the request now? 

Cancel De-activation (Malicious link redacted)

Comments Off on Deactivation scam (7/21/17)

Invitation Phishing Scam (7/21/2017)

The following scam attempts to get a victim to click on a malicious PDF. Notice the generic language, grammatical errors,  and non-VCU sender’s email. All of these are tell-tale signs of a scam. Please delete this message if you received it and do not open the PDF.

 

From: Katherine Libby <klibby@vaoralhealth.org>
Date: Fri, Jul 21, 2017 at 11:44 AM
Subject: Shared Invitation
To:  Victim@vcu.edu

Hello,
I hope this email finds you well? Please share your thought concerning the attached form of our recent accomplishments and invitation. Please confirm receipt as well as attendance. We have to give the place a head count by Thursday, july 27th.
Scan0012017.pdf
Comments Off on Invitation Phishing Scam (7/21/2017)

Job scam (7/19/17)

The following scam attempts to trick its victims into providing personal information, and possibly into a financial scam. Please note that no legit company will ever offer an individual a job without any form of interview, and legit companies will not be hiring individuals and communicating via a Gmail account. If you see these types of emails, then please ignore and delete them.

______________________________________________

From: AUSENCO CONSTRUCTION LLC <joeyxxxxx1322@gmail.com>
Date: Tue, Jul 18, 2017 at 12:48 PM
Subject:
To:

 

Hello  XXXXX,
 
 
Thanks for taking your time to read back to us with your interest about the job,We are AUSENCO a global, diversified engineering,construction and project management company providing services in Minerals &Sustainability and Oil & Gas. We deliver new and better ways to add value to our clients`projects no matter how demanding and we deliver results in some of the world!s most challenging environments .. We have Representatives in the States  that are currently working for the company, these Representatives need materials for the completion of their works.They will email you whenever they need materials and also state type of materials and the quantity they need, It is now your duty to contact the supplier through email or text to make orders for the materials and also state the quantity that should be mailed out to the agent address through post.. Each Representative will only order for materials once a week depending on the task he or she is to have completed for that week, we are employing you just to reduce the workload for us on Our supplier and for the Representatives  and also to keep record of materials and payment receipt record that are being ordered weekly by our Representatives , Is an online pay job where supplier  will only contact you for materials during the weekdays and you can have your own part of the work completed at your spare time in school or at home
 
 
Salary/Wages payment:As sated in the first email.
 
We will always email or text you guidelines and instructions to follow in
getting your job done perfectly when you start working.If you still
care to proceed with the job, Get back to us with the information
listed below so we can process your application as to consider it
valid to commence working with us.
 
NAME:
AGE:
CONTACT ADDRESS:
CITY:
STATE:
ZIP CODE:
MOBILE:
PERSONAL EMAIL: 
Comments Off on Job scam (7/19/17)

Person of Interest (7/17/17)

The following scam attempts to get a victim to click on a malicious link. Notice the generic language, non-VCU sender’s email. and masked link; all of which are tell-tale signs of a scam. Please delete this message if you received it.

 

From: <Mark.fulert@businessdesc.info>
Date: Jul 17, 2017 10:00 AM
Subject: Person of Interest?
To: <XXXXXXXX@vcu.edu>
Cc:

I’m hunting down a person of interesting in your area. I only have some small details, but I’ve tracked him to your vicinity. If you could look at this photo and if you recognize this person please contact me back.

Click here (Malicious Link Redacted)

Comments Off on Person of Interest (7/17/17)