Archive | April, 2018

NA Career Service and NA TLT Hiring approval form, Scam (4-25-18)

The following is a job offer scam in which the scammer is posing as an employer who is looking to hiring students. This scam will have the victim send their resume over to the scammer to be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from is not the same email where the scammer is requesting the resume be sent to. Both emails are not business emails and the email signature does not state which company they represent. Note that if someone was to offer a job they would use their business email.

If you have received this email please delete it.
———————————————————————————————————
From: Latshaw, Melody Melody.Latshaw@kingcounty.gov
Date: Tue, Apr 24, 2018 at 10:11 AM
Subject: FW: NA Career Service and NA TLT Hiring approval form
To: victim victim@vcu.edu

Spring Quarter 2018(part time) Recruitment

I am Dr. Neil Roberts. I specialize in arthroscopic surgery, sports medicine, trauma and fractures, and athletic injuries to the shoulder, elbow, and foot and ankle. I also have an interest in shoulder and knee replacement procedures. I am the team physician for Northwest University in Kirkland. I also served as team physician for the US Women’s U20 National soccer team and other professional sports including hockey, golf and tennis. I am also involved with local high school and club sports teams. In addition, I am a consultant for Cirque du Soleil.

I’m dedicated to helping each of my patients gain maximum function and physical potential through individualized patient education and cutting-edge surgical and non-surgical treatment of musculoskeletal conditions. The most important part of my relationship with my patients is being a good listener. I learn so much from patients just listening and learning about their lives.

You have received this email because you have an offer from the University Office to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.
This is a very simple employment. You will only help me Mail letters, make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.

I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of May 2018

To Apply, please email your Full name, Address, Alternate email (different from school email) and mobile to ucscrecruitment@gmail.com and a correspondent will reply you as soon as possible.

Regards,
Neil E Roberts, MD

Comments Off on NA Career Service and NA TLT Hiring approval form, Scam (4-25-18)

!STUDENT Career Center, Scam (4-23-18)

The following is a job offer scam in which the scammer is posing as an employer who is looking to hiring students. In this particular case the scammer is pretending to be famous painter Gerhard Richter. This scam will have the victim send their resume over to the scammer to be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from is not the same email where the scammer is requesting the resume be sent to. Both emails are not business emails and the email signature does not state which company they represent. Note that if someone was to offer a job opportunity they would use the business email.

The body of this email is empty but there is a text document attached with information; this information has been posted below. If you have received this email please delete it.
———————————————————————————————————————————————————————————-
From: “Welch, Jessica” welchj2@spu.edu
Date: April 23, 2018 at 11:45:04 EDT
Subject: FW: !STUDENT Career Center
To: Victim victim@vcu.edu

From the help desk of your higher institution recruiting department, I got your data as a qualified candidate for a new on-campus employment scheme. I am seeking someone who is capable of handling my work and run errands at his or her own time. Someone who can help me mail documents, shop for art materials and make bill payments on my behalf.

Can you be able to offer these services?

Where are you located?

I am unable to meet up for an interview because I am currently away on business. I am in Berlin, Germany for an exhibition and a gallery launch. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post office for you to pick up at your convenience.

MAIL CONTENTS MEANING

Personal Letters Letters from my Clients and Family. It includes

Paintings Finished art products returned from an exhibition sale

Art Materials, Canvas The Substances or materials used in creation of my art works.

WEEK PAY- FIVE HUNDRED DOLLARS = That’s not a bad offer after all is it? Your services are constantly needed due to my absence in town for my new gallery launch in Australia.

Visit https://www.gerhard-richter.com/en/art/ to see my type of arts. My arrival is schedule for the last week of MAY/2016 and I will be glad to meet and discuss the possibility of making you employment with me long-term if I am impressed with your services while I am away. Upon your application, I will email you Images and list of what you be done if approved and ready. Please note that no heavy equipment/package is involved and shopping can be done at nearby Walmart or stores around you.

USPS account details for shipping will be provided for your mailing convenience along with clear set of instructions and funds to cover them. Now, If I were to mail you funds for tasks completion and upfront payment, how should your name appear on the payment and where do you want it mailed to?

EMAIL THE FOLLOWING DETAILS TO: – Officialartgallery57@aol.com

Full Name| Full Address| State |Zip Code| Cellphone| Age| Occupation| Alternate Email address (Different from School Email)

GUIDELINE & BENEFITS AS FOLLOW

**Weekly pay of Five Hundred Dollars

**Candidate within the USA only

**Legal name and address must be correct for record purposes

**Instructions on first task will be sent via email upon application approval

** Position is open to individuals 17years and above.

** No Signup fee required

Regards,

Gerhard Richter

Comments Off on !STUDENT Career Center, Scam (4-23-18)

The University Recruiting Department Seeks To Hire Fixed-Term (Part-Time) Faculty Positions, SCAM (4/22/2018)

The following is a job offer scam in which the scammer is posing as an employer who is looking to hiring students. This scam will have the victim send their resume over to the scammer to be offered a job and asked to cash checks to send money over to vendors. These checks will bounce and the victim will be out however much they sent the scammers. This is very similar to the previous job offer scams.

Some signs that this is a scam are that the victim did not reach out first, the email that the scam is being sent from is not the same email where the scammer is requesting the resume be sent to. Both emails are not business emails and the email signature does not state which company they represent. Note that if someone was to offer a job opportunity they would use the business email.

The body of this email is empty but there is a text document attached with information; this information has been posted below. If you have received this email please delete it.
————————————————————————————————————-
From: Aimee Crawley alc151@uclive.ac.nz
Date: Sun, Apr 22, 2018 at 7:17 AM
Subject: The University Recruiting Department Seeks To Hire Fixed-Term (Part-Time) Faculty Positions
To: Victim victim@vcu.edu

See Attach Below

Dear Student,
I am Dr. William Morgan and I work as a clinical counselor for the department of Disability Resources and Educational Services . I provide individual and group therapy, coaching, assessment and academic screenings to support students with disabilities (physical, chronic, psychiatric, and invisible)registered with DRES. A large percentage of the students served by the mental health unit have psychiatric disabilities or co-morbid psychiatric disabilities and need mental health support to be successful at the university. In addition, many University of students with academic di?culties and no prior diagnosis are seen and assessed through the academic screening and assessment process. I also am the director of supervision, training and coordination of counseling psychology and clinical psychology graduate students of the United States who have practicums at DRES and APA-accredited school psychology pre-doctoral interns. I’m dedicated to helping each of my patients gain maximum function and physical potential through individualized patient education and cutting-edge surgical and non-surgical treatment of musculoskeletal conditions. The most important part of my relationship with my patients is being a good listener. I learn so much from patients just listening and learning about their lives.
You have received this email because you have an offer from the University Office for Students with Disabilities to work with me while we help Students with disabilities frustrated with ignorance and lack of services but as my temporary personal assistant. I care about Animal Welfare, Arts and Culture, Children, Civil Rights and Social Action, Education, Environment, Disaster and Humanitarian Relief, Social Services and lots more.
This is a very simple employment. You will only help me Mail letters, Make payments at Walmart and purchase some Items when needed. This employment only takes an hour a day and 3 times a week for $620 weekly.
I am unable to meetup for an interview because I am currently away and helping the disabled students in Australia. You will be paid in advance for all tasks and purchased to be done on my behalf and some of my personal letters and mails will be forwarded to your residence or nearby post for you to pick up at your convenience. Upon my arrival we will discuss the possibility of making this a long-term employment if I am impressed with your services while I am away. My arrival is scheduled for the last week of May 2018
To Apply, Please email your Full name, Address, Alternate email (different from school email) and mobile and To Officialsupervisor657@gmail.com a Correspondent will reply you as soon as possible.

Best Regard,
Dr Williams Morgan MD

Comments Off on The University Recruiting Department Seeks To Hire Fixed-Term (Part-Time) Faculty Positions, SCAM (4/22/2018)

Catalog of Police & Military Protectors, Scam (4-20-18)

The following is a scam in which the scammer poses as a military grade manufacturer of bulletproof vests. The scammer hopes that the victim will reach out to the scammer with questions or inquiries. The scammers are looking for vulnerable people confused about transactions in their statement and are hoping that the victim will contact the scammer and give over their bank account info.

Some signs this is a scam are the many grammar/spelling mistakes in the email and the unsolicited email. If you receive an email from someone who you are not expecting an email from please be naturally suspicious of the email.

If you have received this email please delete it!
———————————————————————————————————
From: Jane Yao trade@foxarmour.com
Reply-To: Jane Yao trade@foxarmour.com
Date: Friday, April 20, 2018 at 8:40 AM
To: Victim victim@vcu.edu
Subject:Catalog of Police & Military Protectors

If you find our bank account has any change, please call me or contact me online for confirmation at once.

Comments Off on Catalog of Police & Military Protectors, Scam (4-20-18)

Password Reset, Scam (4-17-2018)

The following is a scam in which the scammer is impersonating a password reset that the user did not request. The scam will bring the victim to a page to reset their password which will be used to steal the user’s credentials. You can tell this is a scam because the reset was not requested. Do not reset your password if you have not requested the service to reset your password! Also the URL behind the link is completely different.

If you have received this email you can safely delete and ignore it.
————————————————————————————————————-

From: Do Not Reply donotreply@webadmit.org
Date: Tue, Apr 17, 2018 at 2:55 PM
Subject: Password reset
To: Victim victim@vcu.edu

Dear Victim,

Your username for WebAdMIT is victim@vcu.edu

You can set a new password by following this link:

http://current.webadmit.org/password_resets/w2lpxXT1MXiL5Edqleffd/edit (Malicious Link Removed)

This link expires in 24 hours. If you need another password reset link, click the “Forgot username or password?” link on the WebAdMIT login screen.

If you have questions, please contact your WebAdMIT Support Team.

Please do not reply to this automated message

Comments Off on Password Reset, Scam (4-17-2018)

[EXTERNAL]Package Delivery Delay, Scam 4-11-18

The following is a scam where the scammer poses as a package delivery representative. The scam involves alerting the victim that a package meant for them is delayed. In order to see the updated information on their package the victim needs to click a link.

Some signs that this is a scam are the fact that; the user is not expecting a package, the scammer is emailing from a non-business email, and the name on the email is not the same as the email signature. The email signature claims to be from an automated system yet uses a personal account instead of a service account. All of these are signs that this is a scam.

If you have received this email please delete it.
—————————————————————————-

From: Patrick@richmondrep.us
Subject: [EXTERNAL] Package Delivery Delay
Date: April 11, 2018 at 9:50:54 AM EDT
To: Victim@vcuhealth.org

Dear Sir/Madam

Your package has been delayed.

Please click on the tracking number to see its new delivery date

Tracking New Delivery Date

Thanks,

M.Goodwin

(DX Logistics Manager)

(Please do not reply to this message, it is an automated system)

Comments Off on [EXTERNAL]Package Delivery Delay, Scam 4-11-18

New Email System 2018

The following is a scam in which the victim is being informed that VCU has decided to go with a new email system. The user will need to either postpone the change or opt-out completely, both links are provided. In actuality both links are a scam. Upon clicking the links the scammer will steal the victim’s information or infect the victim’s machine with malware.

Some signs this is a scam are; the email change is unannounced on VCU’s Technology Site (https://ts.vcu.edu/), there is no announcement to back up the statement of a new email system. The email address in which the sender is using is not a service account, the email signature doesn’t match up to email address. All of these are signs of a scam.

If you have received this email please delete it.
——————————————————————————————————————————————
From: adbarnes@richmondrep.us
Date: Mon, Apr 9, 2018 at 11:01 AM
Subject: New Email System 2018
To: Victim@vcu.edu

Congratulations Faculty/Staff Member,

You have been randomly selected to beta test VCUs new email system. This new system provides many new and exciting features that we are excited about. This includes the abilities to recall emails with errors as well as notify you when sent email is read by the recipient. Unfortunately, due to our current contract, old email will not be transfered into the new system. Your account will automatically convert at the end of business today. If you would like to postpone this transition or opt-out, please click one of two links below.

Click here to Postpone (3 days) (Malicious Link Removed)

Click here to Opt-out (Malicious Link Removed)

Sincerely,

VCU Technology Services

Comments Off on New Email System 2018

[EXTERNAL], Scam 4/9/2018

The following is a scam in which the scammer sends a link over to the victim hoping that they click the link. Upon being clicked the scammer will attempt to steal user information or infect the victim’s machine with malware.

Some signs that is is a scam are the fact that the victim did not know the scammer nor recognize the address. Another sign is that the email only has the malicious link, which in this case has been masked with google URL shortener. Never trust an email from someone you don’t know.

If you have received this email please delete it.
—————————————————————————————————————————–
From: I R [mailto:karen@websiteassistant.co.uk]
Sent: Saturday, March 31, 2018 7:36 PM
To: Victim
Subject: [EXTERNAL]

Good evening Victim https://goo.gl/(MALICIOUS URL REMOVED) I R

This message was secured by Zix(R).

Comments Off on [EXTERNAL], Scam 4/9/2018

RE: Invoice, Scam (4-6-2018)

The following is a scam in which the scammer pretends that they have a package for the victim. The package which was meant to be delivered to the victim accidentally got sent to the scammer instead. The scammer has included a link to a photo of the package.

Upon clicking the link, the scammer will be able to infect the victim’s machine and thus steal information of the victim. Using this information the scammer can access the victim’s accounts including banks, work, email, etc.

Some signs that this is a scam are the non-business email. The email address and the email signature are not the same. If you are not expecting a package there is no reason to trust this email that you have one waiting for you.

If you have received this email please delete it.
———————————————————————————————————————-
From: Amanda@businessdesc.info
Date: Thu, Mar 15, 2018 at 10:28 AM
Subject: RE:Invoice
To: victim@vcu.edu

Hi,

A package was delivered to us by mistake…..I think

I opened the box and noted that your email was on the invoice…coming up to Christmas I thought it might be personal or work related.

We are just down the road by the Mcdonalds. I can drop it by if you will be in this afternnon?

I took a picture of the invoice, I can’t make out the name but you can clearly see your email address

Picture of Invoice (Malicious Link Removed)

Sincerly,

Wendy Mcguire

Sales Representative

Ashley and Mullins Law Firm LLC

Comments Off on RE: Invoice, Scam (4-6-2018)

Google Docs, Scam (4-5-2018)

The following is a scam in which the scammer has a document waiting for the victim. This document as you may realize is not actually a document but a trap that the scammer has set up. Once clicked the scammer will steal the victim’s information and use it for nefarious purposes.

Notice that the link the scammer gives is a not a shared link from Google Docs. If you receive email from people you do not know, do not trust the email.

If you have received this email please delete it.
———————————————————————————-
From: Mark.Anthony@cloudevolution.us
Date: Mon, Mar 12, 2018 at 12:41 PM
Subject: Google Docs
To: victim@vcu.edu

I’ve shared a couple of documents with you via Google Docs.

162.209.3.163:80 (Note: this IP is not where the link leads, instead it leads somewhere else)

Comments Off on Google Docs, Scam (4-5-2018)