Catch of the Day
It seems new email scams pop up every day. ITS would like to introduce the "Catch of the Day" a place to come and see the latest scams we're seeing on campus.
Remember, ITS will NEVER ask you for your password and you should NEVER send your password to anyone via email. No exceptions.
Please contact the ITS Service Desk at email@example.com or 678-839-6587 if you have any questions or know of a scam not listed here.
Phishing Scam Alert
Several people have received emails saying their account has exceeded its limit and can no longer receive email. It goes on to ask you to follow a link to reset the account. This is a phishing scam and should be deleted. Do not click on the link. ITS will never ask for your password via email. Don't ever send your password to anyone via email!
It may look something like this:
Dear Email Owner
You have exceeded the limit of your mailbox set by our IT Service, and from now you cannot be receiving all incoming emails and also some of your outgoing emails will not be delivered and LASTLY, your account will be 'DE-ACTIVATED' within 24 hours from now. To prevent this, you are advised to click on the link below to reset your account. Failure to do this, will result to limited access to your mailbox while your account will remain IN-ACTIVE within the next 24 hours.
Click link: <LINK REMOVED>
Thanks for letting us server you better!
Phishing Scam Alert
Several people have received emails saying their webmail or email account is expiring. This is a phishing scam and should be deleted. Do not click on the link. ITS will never ask for your password via email. Don't ever send your password to anyone via email!
It may look something like this:
Helpdesk requires you to upgrade webmail by
This Message is From Heldesk. Due to our latest IP Security upgrades we have reason to believe tha t your webmail account was accessed by a third party. Protecting the security of your webmail acco unt is our primary concern, we have limited access to sensitive webmail account features.Failure t o revalidate, your e-mail will be blocked in 24 hours.Thank you for your cooperation.Help Desk
Phishing Scam Alert: Several people received a DHL message yesterday that may have contained a virus in a zip file. The text of the message follows: "DHL Express Notification for shipment: Wed, 9 Nov 2011 14:04:41 -0800 AWB Number: 84346670531052942771 Pickup Date: 2011-11-03 07:46:00 Service: M Pieces: 1 Custom. Reference: 91384830 "EVENT CATEGORY Wed, 9 Nov 2011 14:04:41 -0800 - Clearance processing complete PLEASE REFER TO ATTACHED FILE FOR DETAILED INFORMATION. Shipment status may also be obtained from our Internet site in USA under (URL redacted) or Globally under (URL redacted) "Please do not reply to this e-mail. This is an automated application used only for sending proactive notifications." If you receive this message, please do not open the attachment, do not follow any links and do not forward it. Delete it immediately. If you have any questions, don’t hesitate to contact the service desk via e-mail or by calling extension 9-6587.
Subject: “Important Message From Helpdesk.
Dear Account Owner,
BR> We are currently migrating to Microsoft Exchange 2011 (from Exchange 2003/2007). With the introduction of Internet Explorer 9, Outlook Express has apparently been removed from the installation package on our Message Center. OWA 2010 provides the same conversation view and experience as Outlook 2010: By default, messages are displayed in threads so that all the messages on a particular topic are grouped. Inability to complete information on the form within 48 hours Message Center will render your e-mail in-active from our database. Fill information on the Form by clicking on the link below:
**IMBEDDED SCAM LINK**
You will receive an e-mail within 48 hours when your mailbox account is moved.
(@)2011.All Rights Reserved
Legal Disclaimer: The information contained in this message may be privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and delete or destroy any copy of this message
Subject: Your webmail quota has exceededYour webmail quota has exceeded the set quota which is 20 GB. you are currently running on 20.9 GB. To re-activate and increase your webmail quota please click the link below.
Failure to do so may result in the cancellation of your webmail account.Thanks, and sorry for the inconvenience.Local host
8/3Subject: URGENT! Message From IT- HelpdeskDear Webmail User This is the Help desk Program that periodically checks the size of your e-mail space is sending you this information. The program runs to ensure your inbox does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes(MB) or more stored in your inbox. We are currently upgrading our data base and e-mail center. We are resetting all email to create more space for new email Storage. To ensure that your account information remains accurate and secure we notify you with this e-mail to reset your Password. To reset and revalidate click the Microsoft Login Page below:
Failure to submit your password will render your e-mail in-active from our database. Thank you for using our Web mail!Regards,Help desk! Account Services
6/14Subject Line reads: "Your OWA (Outlook Web Access) Will Be Deactivated Soon"
Dear Email Users,
This Message is IT System, Helpdesk. The major project of upgrading the email servers to Microsoft Exchange 2011 (from Exchange 2003/2007) is in progress. Mailbox moves have been completed, you only need to complete the below information to Activate. Immediately the information is received, mailbox moves will begin shortly and storage space will increase from 500MB to 1GB. OWA (Outlook Web Access) accessed will begin, please kindly fill with valid information by clicking on the link below:
Our goal is to have your email account moves completed before 48 hours.
You will receive an e-mail in a couple of hours when your mailbox account is moved. Inability to complete information on the form within 48 hours you receive this e-mail will render your e-mail in-active from our database.
Helpdesk! Account Services
Message that looks like its from USAA with the following text :
We would like to inform you that we have released a new version of USAA Cardholder Form. This form is required to be completed by all USAA cardholders. Please fill in the form below and send it to our automated email robot:
This is followed with a link and a request for information. This email is a phishing scam. We're seeing a lot of them today. Please do not click on the link in the email or reply to the message.
Various messages with the subject of "Email Account Notification Letter" with a link for you to upgrade your mailbox. These messages are phishing and are not legitimate. Please delete them from your inbox and do NOT click on the link.
Message that appears to be from the "IT DESK" with the following text:
westga.edu Mail Administrator will maintain the system in order to increase our ability to mail servers and efficiency in order to match the increase in the number of customers during 6th October 2010 from 6:00am to October 10th 2010 at 6.00 pm. All customers are required to provide us with the information below for updating and maintenance.
Note:In the absence of this information, your account will be deleted by our mail server. As a result, customers may not be able to use e-mail during this temporary maintenance period. Sorry for the inconvenience.
This message is NOT from ITS and is a phishing scam. ITS will never ask for your password via email. Do not ever send your password to anyone via email.
Message that appears to be from Netflix saying that one of your movies was lost in the mail. This message is spam. The link inside the message are to unsafe sites. If you have a Netflix and are concerned, we recommend you log into your Netflix account and verify your information with them.
Facebook users are being targeted in a scam that offers them a chance to install a "dislike" button.The scam tricks users into allowing a rogue application to access their profile page, which then posts spam messages.It also attempts to lure people into completing an online survey, for which the scammers are paid money.
Email that looks like its from Best Buy saying your Anti-Virus Protection Plan has been renewed with links. This is not a legitimate message.
Email from "Tax Commissar" with a subject line of "You are in a higher tax bracket" indicating your tax bracket has changed and that you need to review your annual tax report. The attachment is called "tax-report.zip". This email is not a legitimate message.
Email that appears to be from amazon.com with a subject of "Your Order with Amazon.com". It mentions a specific order with information and gives a link for checking status. Do not click on this link. It is not a legitimate message.
Email that appears to be Social Security Administration with the subject "Review you annual Social Security statement" and an attachment called "statement.zip." DO NOT click on the attachment. This is not a legitimate message.
Email that appears to be from wikipedia (firstname.lastname@example.org) with a subject line "Wikipedia e-mail address confirmation." The body of the email says someone from an IP address has registered your account. There are links to confirm or to cancel. DO NOT click on these links. This is not a legitimate message.
This morning there are a large number of emails coming from "westga.edu" with a subject line of "Confirm your e-mail address for Windows Live ID." The email asks for confirmation and gives cancellation options with a link. DO NOT click on the link. Simply delete the message. This is a copy of the message (minus the links): Hello, email@example.com. Thank you for signing up for a westga.edu. Please follow the instructions below to confirm that you signed up for this account, or to cancel the account if you did not sign up. CONFIRM ACCOUNT To help prevent unauthorized account creation, we need you to confirm your e-mail address. We will use this e-mail address to send you important messages about your account. Also, some Windows Live ID sites and services may require a confirmed e-mail address. CANCEL ACCOUNT If you didn't sign up for the account with this e-mail address and want to cancel the account, select and copy the following link. Open a browser and paste the link in the address bar. Press Enter or Return on your keyboard and follow the instructions that display. Cancel your email by visiting the URL Thank you, westga.edu Customer Support
A number of email accounts at UWG have received an email appearing to be from twitter.com. These are fraudulent emails. The email contains a link that the user can go to if they have received the email in error. Users should not attempt to connect to any of the links in these messages. Hi, firstname.lastname@example.org You have 1 unread message from Twitter Please click on the link below or copy and paste the URL into your browser: fake twitter address The Twitter Team
Email message with the subject line "Outlook Setup Notification", an attachment named "outlookupdate.zip" and this message: You have (X) messages from Microsoft Outlook. Please re-configure your Microsoft Outlook again. Download attached setup file and install.
Email message with the subject line "You have received a greeting card" and this message: Good day. Your family member has sent you an ecard To view your ecard, open this file. ***file removed for security*** Best wishes, Postmaster,
Email message with the subject line "Please look my CV. Thank you", an attached file called "MY_Resume_118.zip" and this message: Hello! I have figured out that you have an available job. I am quiet intrested in it. So I send you my resume, Looking forward to your reply. Thank you.
Email message with the subject line "New Resume" and an attached file called "Resume_writing_347.zip" and this message: Please review my CV. Thank you!
Email message with an attached file called "iTunes_certificate_197.zip" and this message: Hello! You have received an iTunes Gift Certificate in the amount of $50.00 You can find your certificate code in attachment below. Then you need to open iTunes. Once you verify your account, $50.00 will be credited to your account, so you can start buying music, games, video right away. iTunes Store.
Email message with an attached file called "setup.zip" and this message: Your transaction has been processed by WorldPay, on behalf of Amazon Inc. The invoice file is attached to this message. This is not a tax receipt. We processed your payment. Amazon Inc has received your order, and will inform you about delivery. Sincerely, Amazon Team
Email message with an attached file named "setup.zip" and the following text: "SMTP and POP3 servers for email@example.com mailbox are changed. Please carefully read the attached instructions before updating settings"
4/26Email message with an attached file named "ecard.zip: and the following text: "Good day.
You have received an eCard To pick up your eCard, open attached file Your card will be available for pick-up beginning for the next 30
Please be sure to view your eCard before the days are up! We hope you enjoy you eCard. Thank You!"
Email message with an attached file named "password.zip" and the following text: "Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document. Thanks, The Myspace Team."
Email message with an attached file named "setup.zip" and the following text: "Dear Customer, This e-mail was send by westga.edu to notify you that we have temporarily prevented access to your account. We have reasons to believe that your account may have been accessed by someone else. Please run attached file and Follow instructions (C) westga.edu"
Can't find what you're looking for here? Be sure to check out snopes: http://www.snopes.com/fraud/phishing/phishing.asp for othe internet scams and fraud alerts.