Archive | Uncategorized RSS feed for this section

HelpDesk scam (8/18/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently attempt to steal the user’s credentials; notice the generic language, non-VCU sender’s email address, sense of urgency, and the non-VCU link; all of which are signs of a scam. Please delete this message if you received it.

________________________________

From: Aaron Lim <aarxx.xxx@vcuhealth.org>
Date: August 18, 2017 at 8:58:35 PM EDT
Subject: HelpDesk


All Staffs and Students are expected to migrate to the New 2017 Microsoft Outlook Web portal to access the below, 
click here (Malicious link removed) to migrate:

·    Access the new staff directory

·    Access your pay slips and P60s

·    Update your ID photo

·     E-mail and Calendar Flexibility 

·    Connect mobile number to e-mail for voicemail 

 

Important notice:  All staffs and students are expected to migrate within 24 hours to avoid delay on mail delivery.

 

On behalf of IT Support. This is a group email account and its been monitored 24/7, therefore, please do not ignore this notification, because its very compulsory. 
 
Sincerely.
Admin Team.

 

Leave a Comment

Facebook scam (8/14/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently attempt to steal the victims’ information. Notice the non-Facebook sender’s email, the non-Facebook link; all of which are tell-tale signs of a scam. Please delete this message if you received it.

_______________________________

From: <Barabara.xxxxxx@xxxxxxxxxxts.us>
Date: Aug 14, 2017 2:51 PM
Subject: Did you attempt to log into my facebook by accident?
To:
Cc:

Was this you …..?

We have detected an unauthorized login attempt. 10 or more incorrect passwords in a row were attempted. Please log int to veify any changes.

16x.2xx.x.16x:80/InvalidAttempt

Leave a Comment

Employment scam (8/14/17)

The following scam attempts to trick its victims into contacting the sender back; which will subsequently lead to some form of fraud. Notice the generic email, the too-good-to-be-true message, and the simple fact that the scammer is freely soliciting “job opportunities” from a gmail address; all of these are signs of a scam. Please delete this message if you received it.

___________________________________________

From: xxxxxxxxxxone5@gmail.com

To:

Date: 8/12/2017 8:46 AM

Subject: HERE IS AN IMMEDIATE PART-TIME PERSONAL ASSISTANT POSITION*** APPLY NOW !!!

    Seeking a part-time administrative assistant to perform various administrative tasks, organizing files, and processing billing paperwork. An ideal candidate, Self-Motivated, Eager and Computer skills are preferred. Experience is not necessary.
 To send your resume for consideration and full job details, CLICK HERE! (Malicious email address removed)

Nasita S. Kones.

Project Manager,

University Employment Team.
Leave a Comment

Weird message scam (8/3/17)

The following scam attempts to trick you into clicking on a malicious link. The scammers in this case attempts to use an odd looking message to lure curious recipients into clicking on a link. Notice the non-VCU sender’s email address, the non-VCU link, and the general weird message; All of them are signs of a scam. Please delete this message if you received it.

______________________________________

From: <EXXXXXXX.M@cloxxxxxxxtion.us>
Date: Thu, Aug 3, 2017 at 9:55 AM
Subject: S\00c\00a\00n\00n\00e\00d\00 \00I\00m\00a\00g\00e\00 \00f\00r\00o\00m\00 \00a\00 \00H\00P\00 \00D\00i\00g\00i\00t\00a\00l\00 \00D\00e\00v\00i\00c\00e
To:

Please open the attached document. This document was digitally sent to you using an HP Digital Sending device. To view this document you need to use the Adobe Acrobat Reader.

HP Digital Sender (Malicious link removed)

Comments Off on Weird message scam (8/3/17)

Bank transfer scam (8/3/17)

The following scam attempts to trick its recipient into replying with banking information. Notice the non-VCU sender’s email address and unusual message. Please delete this message if you received it.

______________________________________

From: XXXXXX X. XXXXXX <hon666@inbox.lv>
Date: Thu, Aug 3, 2017 at 10:48 AM
Subject: RE: Follow up!!!
To:

 Erin,

​Does the bank Charge us same amount for Standard wire and ACH payment? What details do you need for ACH payment?

Regards

XXXXXX X. XXXXXX (This is the name of some high ranking VCU official)

Sent from my iPad

Comments Off on Bank transfer scam (8/3/17)

DocuSign scam (8/1/17)

The following scam attempts to trick its recipient into clicking on a malicious link, which will subsequently steal the victim’s information. Notice the unknown external sender’s email address. generic language, and the generic link. To see where a link is taking you, please remember to hover your mouse over the link if you are using a computer, or tap and hold the link if you are using a smartphone. Examining the link before clicking on them will reduce the likelihood of you falling victim to these scams.

________________________________________

From: XXXXXX@businessXXX.info

To:

Date: Tues, 8/1/2017 2:34 PM

Subject: [EXTERNAL] Update Required

 

You have a document waiting from:

Daxxxxxx Maxxxxxxx

Please sign the below document

HR_Update_Form (Malicious link removed)

Comments Off on DocuSign scam (8/1/17)

Reception Scam (7/26/17)

The following scam attempts to trick its victims into clicking on a link. Notice the unknown sender, generic language, and the masked, non-VCU link; all of these are tell-tale signs of a scam. Please delete this message if you received it.

___________________________________

From: <F.Rayser@cxxxxxxxxxelay.us>
Date: Wed, Jul 26, 2017 at 16:57
Subject: Reception
To:

 

A beautiful bunch of flowers has been delivered, but I am unable to read the card. I took a picture of it…anyone recognize it?

Click here

Comments Off on Reception Scam (7/26/17)

MAILBOX LOGIN Alert 7/26/17

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_________________________________________________________

From: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>
Date: Wed, Jul 26, 2017 at 11:08 AM
Subject: Re: ADMIN
To: Crystal Shepherd <crystal.shepherd@sheridancollege.ca>

YOUR MAILBOX HAS BEEN LOGIN SOMEWHERE ELSE CLICK-HERE​ TO CHANGE LOGIN DETAILS.

Comments Off on MAILBOX LOGIN Alert 7/26/17

VCU message scam (7/24/17)

The following scam attempts to trick its victims into clicking on a link and subsequently steals their credentials. Notice the poor spelling and grammar, generic language, and the unknown, non-VCU link; all of these are signs of a scam. Please delete this message if you received it.

_____________________________

From: XXXXX, MXXXXX <xxxxxx@wright.edu>
Date: Sat, Jul 22, 2017 at 11:33 AM
Subject: IT Support Center | VCU Technology Services
To:

Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.
regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly ow.ly/sXopxxxxxxpV (Shortened and malicious URL removed)
© 1996-2016 Virginia Commonwealth University. All rights reserved. Last updated: 07/22/2017
Maintained by VCU Technology Services
Comments Off on VCU message scam (7/24/17)

Deactivation scam (7/22/17)

The following scam attempts to trick its victims into clicking on a malicious link, which will subsequently steal the victim’s account information. Notice the non-VCU email address, generic language, and the masked foreign link; all of which are signs of a scam. Please delete this message if you received.

———————————————————————————————————————————
From: Dover, Milana Kreail <dover.10@wright.edu>
Date: Sat, Jul 22, 2017 at 11:25 AM
Subject: IT Support Center | VCU Technology Services
To:
Hello account user Virginia Commonwealth University most affordable public research university, Our mission to “let knowledge serve the city” reflects our dedication to finding innovative, sustainable solutions to local and global problems. We have also adjusted our system and we find out that your data is no longer on our profile due to error in connection database.

regarding the new Tren on our recent update Simply send your profile and if you do not submit your e-mail, you will not be able to access the Vcu message next time. Follow the instructions to avoid deactivation on your account, use this link quickly (Malicious link redacted)

Comments Off on Deactivation scam (7/22/17)