Employment scam (8/14/17)

The following scam attempts to trick its victims into contacting the sender back; which will subsequently lead to some form of fraud. Notice the generic email, the too-good-to-be-true message, and the simple fact that the scammer is freely soliciting “job opportunities” from a gmail address; all of these are signs of a scam. Please delete this message if you received it.

___________________________________________

From: xxxxxxxxxxone5@gmail.com

To:

Date: 8/12/2017 8:46 AM

Subject: HERE IS AN IMMEDIATE PART-TIME PERSONAL ASSISTANT POSITION*** APPLY NOW !!!

    Seeking a part-time administrative assistant to perform various administrative tasks, organizing files, and processing billing paperwork. An ideal candidate, Self-Motivated, Eager and Computer skills are preferred. Experience is not necessary.
 To send your resume for consideration and full job details, CLICK HERE! (Malicious email address removed)

Nasita S. Kones.

Project Manager,

University Employment Team.
Comments Off on Employment scam (8/14/17)

Weird message scam (8/3/17)

The following scam attempts to trick you into clicking on a malicious link. The scammers in this case attempts to use an odd looking message to lure curious recipients into clicking on a link. Notice the non-VCU sender’s email address, the non-VCU link, and the general weird message; All of them are signs of a scam. Please delete this message if you received it.

______________________________________

From: <EXXXXXXX.M@cloxxxxxxxtion.us>
Date: Thu, Aug 3, 2017 at 9:55 AM
Subject: S\00c\00a\00n\00n\00e\00d\00 \00I\00m\00a\00g\00e\00 \00f\00r\00o\00m\00 \00a\00 \00H\00P\00 \00D\00i\00g\00i\00t\00a\00l\00 \00D\00e\00v\00i\00c\00e
To:

Please open the attached document. This document was digitally sent to you using an HP Digital Sending device. To view this document you need to use the Adobe Acrobat Reader.

HP Digital Sender (Malicious link removed)

Comments Off on Weird message scam (8/3/17)

Bank transfer scam (8/3/17)

The following scam attempts to trick its recipient into replying with banking information. Notice the non-VCU sender’s email address and unusual message. Please delete this message if you received it.

______________________________________

From: XXXXXX X. XXXXXX <hon666@inbox.lv>
Date: Thu, Aug 3, 2017 at 10:48 AM
Subject: RE: Follow up!!!
To:

 Erin,

​Does the bank Charge us same amount for Standard wire and ACH payment? What details do you need for ACH payment?

Regards

XXXXXX X. XXXXXX (This is the name of some high ranking VCU official)

Sent from my iPad

Comments Off on Bank transfer scam (8/3/17)

DocuSign scam (8/1/17)

The following scam attempts to trick its recipient into clicking on a malicious link, which will subsequently steal the victim’s information. Notice the unknown external sender’s email address. generic language, and the generic link. To see where a link is taking you, please remember to hover your mouse over the link if you are using a computer, or tap and hold the link if you are using a smartphone. Examining the link before clicking on them will reduce the likelihood of you falling victim to these scams.

________________________________________

From: XXXXXX@businessXXX.info

To:

Date: Tues, 8/1/2017 2:34 PM

Subject: [EXTERNAL] Update Required

 

You have a document waiting from:

Daxxxxxx Maxxxxxxx

Please sign the below document

HR_Update_Form (Malicious link removed)

Comments Off on DocuSign scam (8/1/17)

Reception Scam (7/26/17)

The following scam attempts to trick its victims into clicking on a link. Notice the unknown sender, generic language, and the masked, non-VCU link; all of these are tell-tale signs of a scam. Please delete this message if you received it.

___________________________________

From: <F.Rayser@cxxxxxxxxxelay.us>
Date: Wed, Jul 26, 2017 at 16:57
Subject: Reception
To:

 

A beautiful bunch of flowers has been delivered, but I am unable to read the card. I took a picture of it…anyone recognize it?

Click here

Comments Off on Reception Scam (7/26/17)

MAILBOX LOGIN Alert 7/26/17

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_________________________________________________________

From: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>
Date: Wed, Jul 26, 2017 at 11:08 AM
Subject: Re: ADMIN
To: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>

YOUR MAILBOX HAS BEEN LOGIN SOMEWHERE ELSE CLICK-HERE​ TO CHANGE LOGIN DETAILS.

Comments Off on MAILBOX LOGIN Alert 7/26/17

VCU message scam (7/24/17)

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_____________________________

From: XXXXX, MXXXXX <xxxxxx@wright.edu>
Date: Sat, Jul 22, 2017 at 11:33 AM
Subject: IT Support Center | VCU Technology Services
To:

Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.
regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly ow.ly/sXopxxxxxxpV (Shortened and malicious URL removed)
© 1996-2016 Virginia Commonwealth University. All rights reserved. Last updated: 07/22/2017
Maintained by VCU Technology Services
Comments Off on VCU message scam (7/24/17)

Deactivation scam (7/22/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently steal the victim’s account information. Notice the non-VCU email address, generic language, and the masked foreign link; all of which are signs of a scam. Please delete this message if you received.

———————————————————————————————————————————
From: Dover, Milana Kreail <dover.10@wright.edu>
Date: Sat, Jul 22, 2017 at 11:25 AM
Subject: IT Support Center | VCU Technology Services
To:
Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.

regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly (Malicious link redacted)

Comments Off on Deactivation scam (7/22/17)

Deactivation scam (7/21/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently steal the victim’s account information. Notice the non-VCU email address, generic language, and the masked foreign link; all of which are signs of a scam. Please delete this message if you received.

___________________________

From: Server [mailto:d.xxxxxx@best1tire.com]
Sent: Friday, July 21, 2017 1:31 PM
To:
Subject: [EXTERNAL] Your request is being processed

 

Hello xxxxxxx,

Notice! A Request to deactivate your  office email xxxxxxxx@vcuhealth.org was made and this request will be processed shortly before 24hrs.

If this was made accidentally, you are advised to cancel the request now? 

Cancel De-activation (Malicious link redacted)

Comments Off on Deactivation scam (7/21/17)

Invitation Phishing Scam (7/21/2017)

The following scam attempts to get a victim to click on a malicious PDF. Notice the generic language, grammatical errors,  and non-VCU sender’s email. All of these are tell-tale signs of a scam. Please delete this message if you received it and do not open the PDF.

 

From: Katherine Libby <klibby@vaoralhealth.org>
Date: Fri, Jul 21, 2017 at 11:44 AM
Subject: Shared Invitation
To:  Victim@vcu.edu

Hello,
I hope this email finds you well? Please share your thought concerning the attached form of our recent accomplishments and invitation. Please confirm receipt as well as attendance. We have to give the place a head count by Thursday, july 27th.
Scan0012017.pdf
Comments Off on Invitation Phishing Scam (7/21/2017)