Recent Scams and Phishing Attempts 2
NEWSFLASH: GOD SAID HELL IS NOW FULL, BUT HE IS STILL LETTING PEOPLE IN THROUGH THE FRONT AND BACK ENTRANCES!
This long diatribe (not copied!) was sent to more then 140 listservs on campus. The purpose seems to be to drive traffic to an 'end times" type website. We have blocked the address from sending more mail, and are investigating how this person was able to get the names of this many lists on campus. List moderators who receive this message for approval should simply delete or not approve. If the message did get through, consider moderating messages from addresses which are not members of the list.
Regarding Your Life
From: "J.L" <nullpwmas@gmail.com>
Sent: Wednesday, September 14, 2011 4:35:49 PM
Subject: Regarding your life
This is the only way I can contact you for now, I want you to be very careful about this and keep this secret with you until I make out space for us to see. You have no need of knowing who I am or where i am from.I know this may sound very surprising to you but it's the situation.I have been paid some ransom in advance to terminate you with some reasons listed to me by my employer. A person I believe you call a friend, I have followed you closely for a while now and have seen that you are innocent of the accusations leveled against you. Do not contact the police or try to send a copy of this to them,because if you do, I will know,and I might be pushed to do what I have been paid to do.Besides, this is the first time I turn out to be a betrayer in my job.I took pity on you.That is why I have made up my mind to help you if you are willing to help yourself.
----------------------
HITMAN is a cruelty-free organization. None of our services have been tested on animals.
Note: Although frightening, this email is a scam, and is fake. There have been multiple sent out on the internet and the best thing you can do is ignore it and report the fake email addresses to google.
Labs and Midterms for Sale
From: "W mattson" < wmattson2@gmail.com >
Sent: Sunday, September 11, 2011 10:42:55 AM
Subject: Botany (2100) Labs and Midterms for Sale
Hi Everyone!
I had considerable success in Botany 2100 so therefore I want to pass my success on to you (for a price, of course ;) ).
Botany package includes:
-All the labs for Botany 2100 (completed and marked) with 90+ score on all of them (Labs 1-7)
-4 Midterms (2009,2010 (Fall and Winter), and 2011)
-I also have reading notes that I will include for Chapters 1-8
****Please note that the labs are the same as the ones that you will be completing, what I did in the past was complete most or all of them before going to the lab and then I would go to the lab and work through it making sure I had everything correct/completed****
- this allowed for the best possible mark while also retaining the knowledge gained from the lab
I am selling the Botany package for $20, I will be selling them tomorrow so if you wish to check them out please don't hesitate to email me and I can tell you where we can meet.
p.s - you will need to bring a flash memory card or CD, the file is too large to email.
Best of luck in your studies,
Will
Note: This account also offered CIS material for sale. When confronted by phone 'Will' indicated he was not and had never been a student at the University of Guelph, so there is deception, and a likely scam for students. This account is now blocked from sending to the UofG.
Please also note that 3rd parties need prior approval to advertise or conduct business on campus. (Policy)
Quota limit exceeded
From: ppoe@krmc.org
Sent: Thursday 08 Sept, 2011
Subject: Quota Limit Exceeded
Admin Notice!
We are currently upgrading our microsoft outlook webaccess
For staff/employee's quality service please visit below site for upgrade
http://pegapr.com/form/use/Helpdesk/form1.html
System Administrator
24.184.237.108
Mailbox quota limit exceeded
From: dmills@ksbe.edu
Sent: Friday 02 Sept, 2011
Subject: Mailbox Quota Limit Exceeded
Admin Notice!
We are currently upgrading our microsoft outlook webaccess
For staff/employee's quality service please visit below site for upgrade
http://aquaductgutters.com/forms/use/ITWEB/form1.html
System Administrator
24.184.237.108
This message is the property of Kamehameha Schools and any attachments are confidential to the intended recipient at the e-mail address to which it has been addressed. If you are not the intended recipient, you may not copy, forward, disclose or use any part of this message or its attachments. If you received this transmission in error please notify the sender immediately by e-mail or contact Kamehameha Schools at 808 523 6200 and then delete this message from your system.
NOTE: This email makes little sense, Kamehameha Schools has nothing to do with the university of guelph, and the link is clearly not an offical educational site as the domain name is Aquaduct Gutters. This is very clearly a phising scam and should be deleted!
Mailbox quota limit exceeded
From: Grisette.Rodriguez@appo.k12.de.us
Sent: Wednesday 24 August, 2011
Subject: Mailbox Quota Limit Exceeded
Mailbox quota limit exceeded To increase mailbox quota limit use below link within the next 48hrs.
http://www.marcad.net/forms1/use/Helpdesk/form1.html
System Administrator
192.168.0.1
NOTE: Once again this example shows classic signs of a scam. The sender address is not a University address, the URL it sends you to is also not a University Address, and always remember Gryphmail shows the amount of space you are using on your email on the left hand side.
Helpdesk Update
From: "Joanna Kaczmarek" <Joanna.Kaczmarek@interiorhealth.ca>
Sent: Monday, 22 August, 2011 10:14:49 PM
Subject: Helpdesk Update
Your mailbox is currently running 99.7% of its Quota limit of 100%. You cannot send or receive email until you have updated your mailbox account. To update your mailbox account, Click Here failure to validate your account may result to loss of important information in your mailbox or cause limited access to it We are sincerely sorry for any inconvenience this might cause you; we tend to serve you better. Thanks for your co-operation. Helpdesk
-----------------------------------------------------------
Note: Remember the common checks of a phising attempt - Check the From Address, in this case, clearly not a UoG account, and step two, Check the Links Given, a bit.ly address, clearly not UoG. Both these signs should raise alarms that this message is fake.
-----------------------------------------------------------
WARNING! REPLY TO UPGRADE YOUR uoguelph.ca ACCOUNT
Subject: WARNING! REPLY TO UPGRADE YOUR uoguelph.ca ACCOUNT
Upgrade your uoguelph.ca account from been suspended, please provide the
below informations:
Email Address:
Username:
Password:
Confirm Password:
Please send your details to: upgrading2011@w.cn
-----------------------------------------------------------
Note: This email was very successful when clearly there are multiple signs it is a phising attempt and not a real email. The email asks you to reply to another email address, in china, also it is sent to multiple people, the university would never do this, and also, it asks for your password, once again, the unversity would never do this through an email.
------------------------------------------------------------
Hello uoguelph.ca User
Date: Mon, 18 Jul 2011 17:52:29 +0100
Subject: Hello uoguelph.ca User
From: Gryph Webmaster Service <richa18patel@gmail.com>
To: undisclosed-recipients:;
--
Hello uoguelph.ca User
Due to database maintenance equipment that is happening in our Center web
mail messages. Our message center must be reset due to the large number of
spam messages we receive daily. The maintenance of quarantine will help us
avoid this dilemma every day and the new software provides a web mail system
new security from hackers to protect our users from getting their accounts
accounts.
To validate your mailbox, CLICK HERE
and fill out the to verify your account:
WARNING! uoguelph.ca owner that refuses to update his/her account after
five (5) days of receipt of the notification of this update, your account
will be excluded permanently from our uoguelph.ca Accounts database and can
also cause malfunction of customer's account or user and uoguelph.ca would
not be responsible for the loss of your uoguelph.ca account.
uoguelph.ca Webmaster,
Engr. Johansson Simpson
Upgrade Team Controller.
-----------------------------------------------------------
Note: The message came from several userids, which we blocked. We have now also blocked the whole subject line : The link is similar to <hxxps://spreadsheets0.google.com/spreadsheet/viewform?formkey=dE04RW8tNkpCdzNvd1pERmhabG5EZlE6MQ> which points to s document which contains malware.
-----------------------------------------------------------
Critical Security Update
From: "Microsoft-Inc. Canada" <securityfix@microsoft.ca>
Sent: Tue, June 7th
Subject: Critical Security Update
Dear Customer,
Please notice that Microsoft has recently issued a Security Update for Microsoft Windows OS.
The Security Update is to prevent malicious users from getting access to your computer files.
The update applies to the following OS versions:
Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows XP, Microsoft Windows 7.
Please notice, that present update applies to high-priority updates category. In order to help protect
your computer against security threats and performance problems, we strongly recommend you to install
this update.
Since public disitribution of this Update throught the official website would have result in efficient
creation of a malicious software, we made a decision to issue this security update via e-mail.
In order to start the update, please follow the step-by-step instructions:
1. Download the file from : http://www.crucia ni.ch/ cruciani/bin/SECURITY_FIX_0492.exe
2- Double-click on SECURITY_FIX_0293.exe to start the update.
This is an Automated Message produced by Microsoft Canada Co., Please Do Not Reply
Microsoft Canada Co.
1950 Meadowvale Blvd
Mississauga, ON
L5N 8L9 CANADA
Tel: 905-568-0434
Fax: 905-568-1527
Web: www.microsoft.ca
-----------------------------------------------------------
NOTE: This email looks very convincing, but any security fixes coming from microsoft would come directly from the microsoft website, not cruciani.ch. Microsoft will also never email you an update, this is all done automatically from your computer so be wary of any email like this.
-----------------------------------------------------------
Dear Student/Staff,
From:
Subject:Dear Student/Staff,
We are having a server overload. It appears that either a virus or a spammer has infiltrated our network. Immediately, we will be shutting down our main server and introduce our backup/emergency server, this way the virus/spammer would cease operation and we will detect and destroy. In order to update your files and setting upon backup introduction, do provide details of your account below:
Account Username:
Account Password:
Date of birth:
After this operation, account credentials and properties will be restoredand will remain thesame. Thereafter, you will be sent an alert to changeaccount credentials.
Thank You.
Help Desk.
Information Technology
-----------------------------------------------------------
Help Desk
From: Bryan.Mullan@det.nsw.edu.au
Sent: Tue, 31 May 2011
Subject: Help Desk
Help Desk
Your Web mail Quota Has Exceeded the Set Quota/Limit To Validate Your Mai=
lbox and Increase Your Quota. CLICK HERE
<https://spreadsheets.google.com/spreadsheet/viewform?formkey=3DdHRUdUpMd=
HZlam5BYXdJcGdxWk9xTmc6MQ>Thank.
Administrator
**********************************************************************
This message is intended for the addressee named and may contain
privileged information or confidential information or both. If you
are not the intended recipient please delete it and notify the sender.
**********************************************************************
-----------------------------------------------------------
Recent Discovery on your email disk panel
From: alert@uoguelph.ca
Sent: Monday, 21 March, 2011 11:47:30 AM
Subject: Recent discovery on your email disk panel
WARNING!!! uoguelph.ca email subscriber
Our records show that you have just exceeded your Email
Quota limit of 350MB. To continue using your email account,
you are required to expand your Email Quota as your email
will be disable shortly due to inadequate space. Increase
your Email Quota and continue to use your email account.
To expand your Email Quota to 1.0 GB, use the below web link:
Our help desk team will not be of any assistance if your account
is closed as a result of your non compliance to this instruction.
*AVOID WRONG DATA SUBMISSION*
Thank you for your understanding.
Copyright ©2011 Webmail Technical Support Centre.
-----------------------------------------------------------
This appears to be coming from alert@uoguelph.ca, but this is not from the university, note that the link takes you to a non university site. Do not eneter your details on any site which does not come from the university! Also, when recieving these messages check your space allocation by looking to the left on gryphmail, a percentage bar is displayed below your name showing how much of your space you are actually using.
-----------------------------------------------------------
Walmart - Survey
From: "Walmart" <supp@walmart.com>
To: yourname@uoguelph.ca
Sent: Wednesday, March 2, 2011 3:29:59 PM
Subject: Walmart - Survey
Dear Walmart Customer,
You have been selected to participate in our latest service improvement program.This consists in
completing a short survey to help us be more aware of our customers needs and suggestions.
In exchange for your time your account will receive 150$ credit.
Please follow the link below to complete our survey and claim your 150$.
<Link> Walmart Survey <Link>
Copyright © 2011 Wal-Mart Stores, Inc.
-----------------------------------------------------------
Note: This email was sent to a large number of people. The message appears to come from Walmart, but does not, and the link points to a legitimate-looking site. Do NOT click on the original link. We have NOT yet blocked "supp@walmart.com" since the addresses is forged.
-----------------------------------------------------------
Account Upgrade
From: University Webmail Maintenance <107108009@nitt.edu
Subject: Account Upgrade
Due To Much spam emails received in your mailbox,we are Upgrading your webmail
solution to prevent unsolicited and unwanted emails in your account.
click the link below to upgrade your webmail account.
http:// brooomsticks.net/ phpform/use/honn/ form1.html
REf Number: UNI/49543/0014334
University Web Maintenance Team.
------------------------------------------------------------------
University of Guelph Help Desk
From: subhanind@brain.net.pk
Sent: Saturday, January 15, 2011 1:51:49 PM
Subject: University of guelph Help Desk.
UNIVERSITY OF GUELPH EMAIL ACCOUNT UPGRADE
ATTENTION WEB-MAIL USER
Your E-mail Box has reached its maximum limit of 20GB storage and your
account will be deactivated if you do not upgrade it now. To upgrade your
web-mail account, kindly click on the below link and follow the
instructions to upgrade space for more storage.
http:// www .ausbildung-fortbildung. de/phpform/use/AccountUpgrade1 /form1.html
Your account shall remain active after you have successfully confirmed
your account.
©Copyright 2011 University of Guelph, 50 Stone Road East Guelph, Ontario,
N1G 2W1 Canada .
WARNING !!!
Failure to log out will allow others to access your account. Closingthe
browser window does NOT log you out properly. To log out, please click one
of the "Log out" icons in the browser window.
------------------------------------------------------------------
Note: This email address has been blocked from the university, but if you clicked this link and entered your password, you should change your password to something different to protect your account. www.uoguelph.ca/ccs/apps/password/change/
Note also that these messages can appear very believable on a mobile device since you may not see all information. Don't fill in an on-line form that you do not trust 100%.
For Older Scams to be aware of, please click here