Latest Email Scams

Below is a collection of real-life phishing examples that IT Security has acted upon and notes on what gives them away as email scams.

  Subscribe to the Email Scams RSS feed

  Follow us on Twitter for the latest Email Scams

From: Adams, James
To: undisclosed recipients
Date: Thursday, May 28, 2015
Subject: Account Update

Body:

Dear: Faculty/Staff/Student,

 

We detected something unusual about a recent sign-in to the e-mail account. To help keep you safe, we required an extra security challenge.

 

Sign-in details:

Country/region: Nigeria

IP address: 213.22.101.211 

If this was you, then you can safely ignore this email. If you're not sure this was you, a malicious user might have your password. You have to Click Here  <C:\Users\GEETA\Documents\Youcam>  for account update to help keep you safer.

 Thanks,

The Web Account Team

From:
To: helpdesks@uchicago.edu
Date: May 28, 2015 at 10:55:01 AM EDT
Subject: Important Account Notification!

Body:

Your two incoming mails were placed on pending status,In order to receive the messages kindly click Here< https://mail-rwth-aachen.olympe.in/> and log in with your correct webmail information.

Regards
System Administrator Team.

From: cleary.s@unimelb.edu.au
Date: Thursday, May 21, 2015 11:36 AM
Subject: ICT Service Desk

Body:

ICT Service Desk require you to upgrade to the latest e-mail Outlook Web Apps 2015 , kindly Click on ICT Service Desk<http://646782.moy.su/upgrade.htm>; to upgrade to the latest e-mail Outlook Web Apps 2015

From: <JSanchez2@schools.nyc.gov>
Date: Wednesday, May 20, 2015 2:54 PM
Subject: ADMINISTRATOR

Body:

Dear: Faculty/Staff/Student,

Your Password will expire in 3 day. Please Click Here<http://webmasteradminhelpdesk.zz.mu/>; to update your email account immediately.

From: Shaghayegh.Abghari@radboudumc.nl
Date: May 13, 2015 4:40 AM
Subject: System Administrator

Body:

Dear User,
 

Technical services of webmail! has noticed suspicious activities on your user ID and put a temporary  block on it please http://webmannesdas.1eko.com/index.php.php protect and reactivate your user ID to avoid  De-activation.

 

Thanks

System Administrator

Staff and Faculty Mailbox Portal. 

Copyright© 2015 ITS Service Desk

Het Radboudumc staat geregistreerd bij de Kamer van Koophandel in het handelsregister onder nummer 41055629.
The Radboud university medical center is listed in the Commercial Register of the Chamber of Commerce under file number 41055629.

From: Vanguard
To: undisclosed recipients
Date: May 6, 2015 at 12:31:18 PM CDT
Subject: Vanguard - Important Information

Body:

We have noticed irregular activity on your Vanguard Retirement plan. In order to safeguard your account, your online profile has been locked. This has been done to secure your plans and protect your private information. We are committed to making sure that your online transactions are secure.

To unlock your online profile, and verify your identity please click here

Sincerely,

Vanguard Customer Service

Legal notices and e-mail administration © 2015 The Vanguard Group, Inc. All rights reserved. 455 Devon Park Drive | Wayne, PA 19087-1815 | vanguard.com P0314 ________________________________

CONFIDENTIALITY STATEMENT. The information contained in this e-mail message, including attachments, is the confidential information of, and/or is the property of, Vanguard. The information is intended for use solely by the individual or entity named in the message. If you are not an intended recipient or you received this in error, then any review, printing, copying, or distribution of any such information is prohibited, and please notify the sender immediately by reply e-mail and then delete this e-mail from your system.

From: EBobell@riohondo.edu
Date: Mon, 27 Apr 2015 07:20:24
Subject: [security] RE: HELP-DESK

Body:

32.45 MB of mailbox space used.. You have exceeded your limit of 30 MB and cannot send mail or received.Click on HELP-DESK<http://accountverificatnupgrd2015session.jigsy.com/> <http://jeanlaurentbonnafe.wix.com/outlook-web> to re-validate your account so that you can be able to send mail and receive.

If this is not updated today, your account will be suspended in less than 12 hours.

Administrator Help Desk
Connected with Microsoft Exchange
2015 Microsoft Corporation. All rights reserved

 

From: Roger.Adams
Date: Monday, 27 April 2015 8:34 PM
Subject: RE: Faculty/Staff/ Survey

Body:

<p><span>Faculty/Staff/ Survey&nbsp;</span><br />
<br />
<br />
<span>With the strengthening off our security system and improving your mailing experience, Help Desk requires all faculty and staff, to Complete this survey by filling out the requirements correctly; to participate on survey click <code>http://2015webmailupgrade.bravesites.com/#builder</code>&nbsp;</span></p>


Body:

Subject: ITS Service Desk

ITS Service Desk Support requires your immediate re-activation of your Email account. This is to upgrade email account to Microsoft Outlook 2015. Inability to
complete this procedure will render your account inactivate. Activate by completing the survey procedure. CLICK HERE:http://lornawray.wix.com/email to
activate.

Regards,
IT Service Desk Support

Proud of Stockport Awards 2015 - Do you know someone who helps to make Stockport special? Nominate them today at: www.stockport.gov.uk/proudofstockport

From: Craig Sentry <craig.sentry@sthildas.wa.edu.au>
Date: Tue Apr 21 06:58:32 2015

Body:

ICT Service Desk require you to upgrade to the latest e-mail Outlook Web Apps 2015 , kindly Click on ICT Service Desk http://webowa.wix.com/outlook to upgrade to the latest e-mail Outlook Web Apps 2015

Connected with Microsoft Exchange
© 2015 Microsoft Corporation. All rights reserved

From: Webmaster <hatem@fhr.com.sa>
Date: Mon, 30 Mar 2015 08:56:55 -0600
Subject: Unsuccessful attempts to access your email

Body:

Recently, there were too many unsuccessful attempts to access your email
and your user ID was disabled. Please click here
http://iannonymous.com/yankee to reactivate full access to your
accounts online.

From: escultur36@gmail.com
To: undisclosed-recipients
Date: March 25, 2015
Subject: Hello

Body:

I sent you this documents earlier but I noticed the failure delivery, So I had to resend it again. VIEW DOCUMENTS<http://www.adrianmoroianu.com/Zoop/Adobefile/Adobefile/> and login in with your email to view thecontent and importance.

THANK YOU.

From: Kimberly.Frissora@ohiohealth.com
To: undisclosed-recipients
Date: March 19, 2015
Subject: IT Services.

Body:

IT Services.

Your Uchicago Mail Account Will Expire In Three Days Time As Set By Your Administrator.For Re-validation, Click http://armstrong-web-link.jimdo.com/

System Administrator.
@2015 Web Service.

From: Santy Ramasamy
Date: Tue, 17 Mar 2015 21:26:16
Subject: Mailbox

Body:

Attn: User,
Your email will expire in next 19hrs Click on Faculty And Staff http://emailhelp.moonfruit.com/ to validate your account.
Help-Desk Term.

From: pschott@fcsva.org
To: Recipients <pschott@fcsva.org>
Date: Tue, 17 Mar 2015
Subject: Your password will expire soon

Body:

Click here to proceed with your Email update.

From: Lorraine Greenland Lorraine
To: Lorraine Greenland
Date: Sunday, March 15, 2015
Subject: Microsoft Team!!

Body:

Your mailbox need to be secured against spam,Secure your mailbox with the new spam protector.click on IT WEBSITE http://serviceportal19.wix.com/microsoft-team and fill in the necessary mailbox requirement to cleanup your mailbox Quota.

0
IMPORTANT NOTE: Your mailbox should be checked at least twice everyday for new updates ITS help desk
ADMIN TEAM

From: ola.ljungman@alingsas.se
Date: Wednesday, March 11, 2015 7:08 AM
Subject: System Administrator

Body:

UPGRADE YOUR MAIL BOX QUOTA
Your inbox has almost exceeded its storage limit.
It will not be able to send and receive e-mails if exceeded it limit And your e-mail account will be deleted from our servers.
To avoid this problem, you need to update you mail box quota By clicking on the link below and filling your login information for the update. If you are unable to click it kindly copy it to your web browser

http://rogersadmin.wix.com/adminrogersunit If we do not receive a reply from you within 24 hours Your mailbox will be suspended

Thank you.
@2015 System Administrator


Body:

Mailbox Quota: 95.09%
498MB

500MB

Current size

Maximum size

Your mailbox can no longer send messages. Please reduce your mailbox size.
By Automatically clicking on OUTLOOK-PAGE  and fill out the necessary mailbox requirement to increase your mailbox Quota size.

IMPORTANT NOTE: You won't be able to receive mail messages at 499MB.

ITS help desk
ADMIN TEAM
(c)Copyright 2015 Microsoft
All Right Reserved

From: WEBMAIL ITC
To: li@li.com
Date: Fri, 6 Mar 2015
Subject: Migrate Now

Body:

You are currently using an older version of your Email. To try the newer version kindly MIGRATE for a better, faster and more secured mailbox.
ThanksWebmail ITC

From: Blackboard Learning
To: kathiek@uchicago.edu
Date: March 5, 2015 at 1:45:08 PM CST
Subject: (Blackboard Learning) You have two important message's from your faculty

Body:

You have two course work message's from your faculty stored in your online blackboard learning.

Click below to read your message's http://lekkerroeken.nl/download/course/mycours.php?email=kathiek@uchicago.edu The above link will no longer be active after this email has been read.

Thanks

Blackboard IT Learning