VCU Health News Scam (5/21/18)

The following scam attempts to trick its victims into clicking on a malicious link. Notice the non-VCU / non-VCUHS sender’s email address, the masked link going to an unknown website, and the generic language; all of these are tell-tale signs of a scam. Please delete this message if you received it.

______________________________________

From: VCU Health <tbeer.dvekemans@sympatico.ca>
Date: Mon, May 21, 2018 at 3:17 PM
Subject: Health News
To:

This message is brought to you by Virginia Commonwealth University, Click on Continue (malicious link redacted) to read now.

Leave a Comment

EMPLOYMENT OPPORTUNITY, Scam (5-19-18)

The following is a job offer scam. This one follows the same format as before with a body that says view the message attached. The attachment has an offer for a job, it does require that the victim email the scammer back at an alternative address.

To spot a scam like this, think is it too good to be true? Do you know the person offering the job? No one will offer a job without an interview. Notice that none of the emails that the scammer is using are business emails. All of these are signs of a scam.

If you have received this email please delete it.
————————————————————————————————————————————————————————

I am Dr.Thomas Lawson.
I specialize in arthroscopic surgery, sports medicine, trauma and fractures, and athletic injuries to the shoulder, elbow, and foot and ankle. I also have an interest in shoulder and knee replacement procedures. I am the team physician for Northwest University in Kirkland. I also served as team physician for the US Women’s U20 National soccer team and other professional sports including hockey, golf and tennis. I am also involved with local high school and club sports teams. In addition, I am a consultant for Cirque du Soleil.

I’m dedicated to helping each of my patients gain maximum function and physical potential through individualized patient education and cutting-edge surgical and non-surgical treatment of musculoskeletal conditions. The most important part of my relationship with my patients is being a good listener. I learn so much from patients just listening and learning about their lives.

You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.
This is a very simple employment. You will only help me Mail letters, Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.

I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of May 2018

To Apply, Please email your Full name, Address, Alternate email (different from school email) and mobile to :- Dr Thomas Lawson ( welbur0073@gmail.com)

Regards,
Dr. Thomas Lawson
Clinical Counselor
Disability Resources and Educational Services(DRES)

Leave a Comment

PART__TIME JOB OFFER, Scam (5-18-18)

The following is yet another job scam. This one follows the same format as before with an empty body with the message attached. The attachment has an offer for a job, it does require that the employee email the scammer back at an alternative address.

To spot a scam like this, think is it too good to be true? Do you know the person offering the job? No one will offer a job without an interview. Notice that none of the emails that the scammer is using are business emails. All of these are signs of a scam.

If you have received this email please delete it.
—————————————————————————————————-
Dear Student,
Am Dr. Williams Morgan and I work as a clinical counselor for the department of Disability Resources and Educational Services (DRES). I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible)registered with DRES. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatric disabilities and need mental health support to be successful at the university. In addition, many University of students with academic difficulties and no prior diagnosis are seen and assessed through the academic screening and assessment process. I also am the director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at DRES and APA-accredited school psychology pre-doctoral interns.

You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant.

I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.

This is a very simple employment. You will only help me Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week or 4 for $620 .00 weekly.I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia.
You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away.

Please email your Full name, Residential Address to receive packages, Alternate email (different from school email) and Cell # ;- Dr Morgan (lukeshaw551@gmail.com)

Regards
Dr Williams Morgan
Clinical Counselor
Disability Resources and Educational Services(DRES)

Leave a Comment

IDD:133 Re: Completed new files in your drive , Scam (5-14-18)

The following is a scam in which the scammer is impersonating a service account (Dropbox) which has an attachment document which the user needs to check. The document is loaded with malware, which once opened will infect the user’s machine and steal their personal data.

Some signs that this is a scam are the non- service account email and just a solo attachment with very little email body. If you have received this email please delete it.
——————————————————————————————————————————————–

From: Dropbox®@transmissiondataencripted.onmicrosftowa.com [mailto:travech@wirra.com.au]
Sent: Wednesday, May 09, 2018 8:36 PM
Subject: [EXTERNAL] IDD:133 Re: Completed new files in your drive
To: victim@vcu.edu

You have one pending message document.

Signed Purchasing Document 07-09-18 (Malicious attachment removed)

View Message

Comments Off on IDD:133 Re: Completed new files in your drive , Scam (5-14-18)

nEW Po received from 18176124543, scam (5-14-18)

The following is a scam in which the scammer is impersonating a system email. The email states that the user has a document waiting for them sent via one-drive. The document is attached to the email. The document is loaded with malware which will be used to steal PII (Credit cards, social security number and passwords) Some signs that this is a scam are the email address is not an official Microsoft account. The grammar in the email is off (you to you, nEW). Also the fact that there is just an attachment with little text is suspicious.

If you have received this email please delete it.
—————————————————————————————————————————————————-

From: ExceI [mailto:ExceI11@prairietransportation.com]
Sent: Friday, May 11, 2018 5:07 PM
To: Victim@vcu.edu
Subject: [EXTERNAL] nEW Po received from 18176124543

You have new documents sent you to you via One-Drive.

PO for __Incoming PaymentD906606-pdf (Malicious attachment removed)

ReviewPay Doc (906708)

Thanks

Comments Off on nEW Po received from 18176124543, scam (5-14-18)

CHANGES, scam (5-14-18)

The following is scam in which the scammer is impersonating a service account for O365 and has an issue that requires the user’s attention to resolve. In this particular scam the issue is a service swap in which the user needs to sign into their account to delay a service swap. The link is a phishing link, once clicked it will show a cloned login page. If the user was to put in their credentials the scammer would have their user information.

Some signs that this is a scam are the urgent issues that require the user’s attention. The email address is not a service account (the username for the account is a service name but the actually email account is a not). The generic signature (Service provider) is another sign of a scam email. The email link, if hovered over, leads to a different site that is not a VCU operated site.

If you have received this email please delete it.
———————————————————————————————————–
From: SUPPORT 365 [mailto:jackiel@nbjch.comcastbiz.net]
Sent: Monday, May 14, 2018 4:21 AM
To: Vicitim@vcu.edu
Subject: [EXTERNAL] CHANGES

Office-365

You are advised to switch to the new version to avoid service interruption switch below

Switch Here (Link Redacted)

Thanks,

Service Provider

Comments Off on CHANGES, scam (5-14-18)

VCU RAMS, Scam (5-10-18)

The following is a scam in which the scammer poses as an advertisement for VCU FAN HOUSE. The ad says that you can sign onto the web page and start accumulating points. The ad claims to represent VCU Department of Athletics.

There is no VCU FAN HOUSE and if there was there would be a post on VCU’s athletics page. Some signs that this is a scam are there are no official VCU statement about VCU FAN HOUSE, the email is sent from a non VCU address, and if you hover over the link you will see that the link leads to another site (non-VCU).

If you have received this email please delete it.
———————————————————————————————————————————-
From: itsc@richmondrep.us
Date: Tue, Apr 24, 2018 at 4:17 PM
Subject: VCU RAMS
To: Victim@vcu.edu

Be a winner.

Everything you do on VCU Fan House earns you points toward awesome perks, prizes and experiences from the VCU Department of Athletics

Simply sign in daily, earn points and see if you’re a winner! The more you do, the greater your chances are of winning!

Review the latest list of winners for week ending 03 November 2017. Click on the list of winners here (Link Redacted).

Comments Off on VCU RAMS, Scam (5-10-18)

Victim Unsuspected News 7Bv8Le, Scam (5-9-18)

The following is a variation of a previous scam. The structure remains the same, however, the scammer claims they have material (footage) of the victim in some embarrassing manner. Unless the victim sends over a sum of money to the scammer, the video of the victim will be sent to their relatives and other contacts. In the hopes that the victim is too embarrassed, the scammer hopes that the victim will send over the money.

This is a scam, the scammer does not have a video of the victim and even if they did, they would not delete it because the victim sent over some money. The scammer will continue to harass the victim for money until the victim gives up. The best course of action if you receive an email like this is to delete it and ignore the email.
———————————————————————————————————————————————-

From: ronald.carney1954@bol.com.br
Date: Wed, May 9, 2018 at 12:10 PM
Subject: Victim Unsuspected news 7Bv8Le
To: victim@vcu.edu

Victim

Hello!

I think that my email is completely unsuspected for you!

I have unpleasant news!

Last time when you visited porno Internet resource, you notebook got bug.

The named virus turned on selfie camera of yours notebook.And this way I possess leverage against you. On that record you abuse yourself.

Pretty soon thebug should have permission to yours contacts. And it could distribute videotape to your friends.

In a case, if you want to check it? Then you should make payment to me 377 dollars in BTC digital currency.

It is my Bitcoin number – REDACTED

Be quick about it! You have just 24 hours!I beg pardon for mistakes- I am not native speaker.

I have snaffled it this postal address.
This is not main email address! D0 n0t answer to this email.

Comments Off on Victim Unsuspected News 7Bv8Le, Scam (5-9-18)

Chick-fil-a Gift, Scam (5-9-18)

The following is a scam in which the scammer is posing as a VCU employee and rewarding employee’s that did well on their last performance review. Some signs that this is a scam are the fact that, the email address is not a VCU address, there is no announcement on the VCU HR site, and the link if hovered over does not take you to a vcu site.

If you have received this email please delete it.
——————————————————————————————————————————————————————

From: itsc@richmondrep.us
Date: Fri, Apr 13, 2018 at 10:45 AM
Subject: Chick-fil-a gift
To: Victim@vcu.edu

Dear Colleagues,

We have recently partnered with Aramark to give out Chick-fil-a gift cards to all faculty/staff who have received a satisfactory or higher rating on their last performance review.

The card value will range from 5$- 25$ based on the last review. Please review the link below to see if your name is on the list. If it is please pick up your gift card from Human Resources building.

LINK (Link removed)

Comments Off on Chick-fil-a Gift, Scam (5-9-18)

Reliable Worker Needed, Scam (5-9-18)

The following is a job offer scam. This scam will have the victim send their resume over to the scammer to be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from has a different name than the email. The email is not a business email and the email signature does not state which company they represent. Note that if someone was to offer a job they would use their business email and request an interview.

If you have received this email please delete it.
——————————————————————————————————————————–

From: Charles M Grant shellyrob1@hotmail.com
Date: Tue, May 8, 2018 at 5:47 PM
Subject: Reliable Worker Needed
To: Victim victim@vcu.edu

Serious, very stable, dependable, reliable individual on Part-Time / Full-Time basis to work as my Assistant who will be book-keeping payment records .
This won’t affect your classes and gives you time for other business activities.
No experience necessary but welcomed..
Do you have the persistence to succeed ..
Pays : $350(Weekly)

If you are interested, please send an email with your resume

Best Regards,
Charles Grant

Comments Off on Reliable Worker Needed, Scam (5-9-18)