Helpdesk scam (7/6/17)

The following scam attempts to trick its victims into clicking on a malicious link, which steals the victims’ password. Notice the generic language, non-VCU sender’s email. and masked link; all of which are tell-tale signs of a scam. Please delete this message if you received it.

_____________________________________

From: George Rich <george.rich@scccd.edu>
Date: Thu, Jul 6, 2017 at 10:49 AM
Subject: HELPDESK​
To:

Pleas kindly follow the instructions attached to migrate your web-mail.

Thanks,
HELPDESK​.

Content of the attachment:

To All,

If you are a faculty or staff member who has not yet had their email migrated to the present Web-Mail

to create space for 2017 Outlook Web Access which has a

high visual definition and creates more space and easy access to e-mail, Please kindly update your

account by clicking on the link below and fill information for activation.

MIGRATE NOW (Link removed)

Follow the procedure and complete information by clicking SUBMIT.

A new space will be created within 48 hours.

Failure to update your Web-Mail we will deactivate such accounts as it will be considered inactive.

Thanks,

HELPDESK

Comments Off on Helpdesk scam (7/6/17)

HR Survey Scam (7/5/17)

The following scam attempts to trick its victims into clicking on a malicious link. Note the none-VCU sender’s email address and the generic language; both are signs of a scam. Please delete this message if you received it.

____________________________________________

From: <lxxxxx.F@comxxxxxxxx.us>
Date: Wed, Jul 5, 2017 at 10:42 AM
Subject: HR Survey
To:

Hi, I was wondering if you could help me with a small problem? Im due to complete the quarterly survery and noted that you hadn’t completed yours.

I promise it will only take a few seconds….

Human Resources Survey (Malicious link removed)

Comments Off on HR Survey Scam (7/5/17)

Part time job scam (7/3/17)

The following scam attempts to trick its victims into submitting their personal information to the scammer, so the scammer can then steal their identities. Please note that no legitimate employer will offer anyone a job through email and without an interview. Please delete this message if you received it.

_____________________________________________________

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Comments Off on Part time job scam (7/3/17)

W2 scam (7/3/17)

The following scam attempts to trick its victims into clicking on a malicious link. Notice the non-VCU sender’s address and masked link; both are tell-tale signs of a scam.

_________________________________

From: <F.Rayser@xxxxxxxlay.us>
Date: Mon, Jul 3, 2017 at 9:24 AM
Subject: W2 paperless
To:
Dear Account Owner,

Our records indicate that you are enrolled in the Virginia Commonwealth University paperless W2 Program. As a result,
you do not receive a paper W2 but instead receive e-mail notification that your online W2 (i.e. “paperless W2”) is
prepared and ready for viewing.

Your W2 is ready for viewing under Employee Self Service. Logon at the following link: Click here (malicious link removed)

If you have trouble logging in to Employee Self Service at the link above, please contact

Mail to
VCU Payroll Services
P. O. Box 842511
Richmond VA 23284-2511
or Deliver to
Human Resource Building
104 North Belvidere Street
or Fax to
(804) 828-3200

On completion of successful logon you can download and open the word document via this link now and enter your zipcode to see your 2017 open enrollment access info.
AAHUTI GUPTA
FINANCIAL ADMINISTRATOR
VCU HR DEPARTMENT

Comments Off on W2 scam (7/3/17)

Package scam (6/30/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will then download malware to the victims’ computers. Notice the unfamiliar email address, generic language, and the masked link; all of which are tell tale signs of a scam. Please delete this message if you received it.

_____________________________________________

From: <Axxxxx@bxxxxxxxxesc.info>
Date: Fri, Jun 30, 2017 at 11:05 AM
Subject: package?
To:

Hi,

A package was delivered to us by mistake…..I think

I opened the box and noted that your email was on the invoice…coming up to summer I thought it might be personal or work related.

We are just down the road by the Mcdonalds. I can drop it by if you will be in this afternoon?

I took a picture of the invoice, I can’t make out the name but you can clearly see your email address

Click here (Malicious link removed)

Comments Off on Package scam (6/30/17)

Fraudulent Charge Scam (6/27/17)

The following scam attempts to trick its victims into clicking on a link, which will subsequently steal their credentials. Notice the urgent message, generic language, and the Weebly website; all of these are signs of a scam. Please delete this message if you received it.

______________________________________

From: XXXX XXXXX
Sent: Tuesday, June 27, 2017 8:54 PM
Subject: Message ID 6925269

 

There was a fraudulent charge attempt on your Debit card .

Your Debit card  Services are currently restricted.

For your own security, you are required to verify your identity before you proceed to review your recent card activity.

Restricted accounts are limited in money transfers or withdrawal funds.

To view full notification visit: http://xxxxxxxxxx.weebly.com/ (malicious site redacted)

 

© 2017 Federal Card Union

Comments Off on Fraudulent Charge Scam (6/27/17)

Problem with Website scam (6/27/17)

The following scam attempts to trick its victims into clicking on a link.  Notice the unknown email address, generic language, and the masked link that does not go to VCU, all of these are tell-tale signs of a scam. Please delete this email if you received it.

____________________________________________

From: <Patxxxx@rxxxxxxxrep.us>
Date: Tue, Jun 27, 2017 at 11:04 AM
Subject: Problem with website?
To:

I’m trying to open the PDF on your website but having no luck what so ever. Its for my 4th grade class …could you see if it opens for you ..at least then I know the problem is at my end.

Click here (Malicious link removed)

Comments Off on Problem with Website scam (6/27/17)

Delivery scam (6/22/17)

The following scam attempts to trick its victims into clicking on a link that is malicious. Note the generic language, unknown sender’s email address, and the masked link; all of which are tell-tale signs of a scam. Please delete this message if you received it.

___________________________________

From: <Richard.Pxxxxl@busixxxxxx.info>
Date: Thu, Jun 22, 2017 at 10:17 AM
Subject: Floral Request
To:

Good Morning,

I work in ‘Friendly Floral’, next to the BB&T Bank and we recieved a request, that we think, is for you. Unfortunately for us, the voicemail that left the delivery was not very clear. We called the front desk and they gave us your email. The closest name and address matches you, so I thought i would email you first to see if you recognize the name and address of the sender.

Click here (Malicious link removed)

Comments Off on Delivery scam (6/22/17)

Problem with website Scam (6/23/17)

From: <Mark.A@businesscorp.info>
Date: Fri, Jun 23, 2017 at 14:26
Subject: Problem with website?
To: <AVic@vcu.edu>

 

I’m trying to open the PDF on your website but having no luck what so ever. Its for my 4th grade class …could you see if it opens for you ..at least then I know the problem is at my end.

Click here

Comments Off on Problem with website Scam (6/23/17)

Unusual Login Attempt Scam (6/15/17)

A simple to spot phishing attempt – this malicious actor didn’t even try to mask the link in the original email. They also didn’t specify anything about who they were or where they worked.

From: Greg Good <Greg.Good@memes.com>
Date: June 14, 2017 at 6:07:28 PM EDT
Subject: Unusual Login Attempt

This message was sent securely using ZixCorp.

In order to help maintain the security of your E-mail account, please verify your email address by

clicking the following link: veryevilbadstuffofnightmares.bad

 

Comments Off on Unusual Login Attempt Scam (6/15/17)