Scam/SPAM Email Archives - Page 9 of 11 - Office of Information Technology

SPAM EMAIL – Thursday, May 5th, 2011

By Joel Scott In Scam/SPAM Email May 5, 2011

Below is yet another SPAM/phishing email. This was not sent by SJU Helpdesk. Some indicators that this is NOT a valid message are bolded below.

______________________________________________________________________

From: “Amy Hayes” <–NOT an SJU email address
To: undisclosed-recipients:;
Sent: Wednesday, May 4, 2011 8:50:37 PM GMT -05:00 US/Canada Eastern
Subject: E-mail Security

We have temporarily limited all access to sensitive account features in your mailbox. In order to restore your full email access, you need to click on the below link to fill the re-activation form.

LINK REMOVED

Technical Support Team.
This e-mail and any attachments may be privileged, confidential, and/or proprietary. If you are not the intended recipient of this email, please delete it and do not read, distribute, or reproduce it. The unauthorized use of this e-mail is strictly prohibited. Thank you. <– NOT the standard SJU helpdesk signature.

Amazon SPAM: May 3

By In Scam/SPAM Email May 3, 2011

This morning, an email containing the following text reached many university employees:
Amazon – Account reactivation form,

Because of possible unauthorized access, we have temporarily
deactivated your account.

To remove the suspension, please confirm that your card was not
stolen.
To do this, please download and complete the attached html form.

We are sorry for the inconvenience, but your security is our top
priority.

Kind Regards,
Customer Service

Included in this email was a link to a form requesting credit card information. We cannot stress enough, NEVER provide personal information of any sort! Protecting personal information is your responsibility.

Important Notice: SPAM EMAIL

By In Scam/SPAM Email, Tech News from the Web, Tech News on Hawk Hill March 31, 2011

This email went out to all University employees this morning:

Dear Colleagues:

I need to bring to your attention an urgent matter; I hope you will read this carefully and cooperate with our IT professionals.

In the past week, 18 employees of the university have fallen victim to an e-mail based scam often described as “phishing.” The purpose of the scam is to enable Internet spammers to acquire university network account access information, which is then used to send unwanted spam messages to recipients around the world. The scam messages sometimes appear as legitimate requests for information designed to enable Information Technology personnel to address a specific recipient’s need or concern. These messages request user name and password information. When one of our users responds to such a request, the security of the university’s technology resources are compromised, and the account information is used to generate tens of thousands of illegitimate e-mail messages in a relatively short period of time.

The impact of falling victim to one of these scams is extensive. The distribution of many thousands of spam e-mails from the university’s systems significantly slows down the processing of legitimate e-mail traffic. When spam messages emanating from the university are received by other e-mail systems, the recipient sites routinely (and often in an automated fashion) add the university’s systems to “blacklists,” sites from which e-mail messages are unconditionally rejected. In the past week, the university has been blacklisted by numerous organizations, including large Internet providers such as Comcast. Blacklisting has prevented many members of our community from exchanging legitimate e-mail with people and organizations outside of the university. Information Technology personnel have invested dozens of hours identifying compromised accounts, deleting outgoing spam messages as these are identified and working through the process of removing the university’s systems from numerous blacklists.

It is important to remember that the Office of Information Technology will never send out a message asking for anyone’s password via e-mail, over the phone or in person. IT receives many spam/phishing attempts on a daily basis. The Help Desk staff always posts information regarding the latest phishing attempt on the IT Blog located at http:/www.sju.edu/blogs/oit.

If you have already responded to one of these scams, you must immediately change your password from the Forgot Password link in the red login box located at http://my.sju.edu. You should also notify the Help Desk at helpdesk@sju.edu or 610-660-2920 so that IT can determine if your account has been compromised in any way. This is a very serious matter. A single compromised account could jeopardize the security of all SJU members. So we ask that you do your part by keeping your password private.

A good way to know that an e-mail is fake and not from SJU IT is to remember that employees of SJU will never ask you to provide your User Id and Password via email. When the Saint Joseph’s University Help Desk sends out a message to the community, it will come from the email address hdstaff@sju.edu. The message will also have the SJU Office of Information Technology header at the top and usually contain “IT Alert or IT Outage” in the subject line. There is also a standard Help Desk signature that concludes the IT Alert or IT Outage emails.

Maintaining the security and integrity of the university’s technology resources is a responsibility shared by every member of the community. Your attention to this serious matter is greatly appreciated.

Brice R. Wachterhauser, Ph.D.

Provost

Changes in Zimbra

By In Scam/SPAM Email, Tech News from the Web March 30, 2011

As a result of the significant amount of spam sent from SJU accounts, we have changed the maximum number of email recipients in Zimbra to be 75. This will not effect email aliases in any way as they are viewed as one recipient in Zimbra. If you are trying to send to more than 75 addresses, you will get an immediate rejection with the error “too many recipients.”

SPAM Email: March 22, 2011

By In Scam/SPAM Email March 22, 2011

This message was NOT sent by the SJU Helpdesk. The subject was marked with the {Spam?} indicator, the return address was a non-sju address and it did not contain the standard SJU Helpdesk signature at the end of the message.
_____________________________________________________________________________________

Subject: Important Notification!

You have exceeded your Email Quota limit of 350MB and you need to
expand your email quota before the next 48 hours. So, if you haven’t
upgrade your Email Account for the 2011, you are required to do it
right now. To expand your email quota limit to 1GB, use any of the
below web links:

http://www.123contactform.com/contact-form-forget01-156953.html

Thank you for your understanding.
Copyright ©2011 Webmaster Helpdesk Centre

SPAM Email: Thursday January, 13th 2011

By Joel Scott In Scam/SPAM Email January 13, 2011

This afternoon at approximately 3:30pm another SPAM email was sent to the university (*see SPAM message below).

It is important to remember that the Office of Information Technology would NEVER send out such a message asking for anyone’s password via e-mail, over the phone, or in person. We receive many of these SPAM/Phishing attempts on a daily basis. The Helpdesk Staff ALWAYS posts information regarding the latest phishing attempt on our IT Blog located at http:/www.sju.edu/blogs/oit.

If you have already responded sending your information, you should IMMEDIATELY change your password from the Forgot Password link in the red login box on http://my.sju.edu so no one else can access your account. You should also notify the IT Help Desk at helpdesk@sju.edu or 610-660-2920 so that we can determine if your account has been compromised in any way.

This is a very serious matter. A single compromised account could jeopardize the security of all SJU members. So we ask that you do your part by keeping your password private.

A good way to know that an e-mail is fake and not from SJU IT is to please remember that employees of SJU will NEVER ask you to provide your User Id and Password via email. It is important to take note as to who the message came from, you will see in this case the sender is not using an SJU email address. When the Saint Joseph’s University Helpdesk sends out a message to the community, it will come from the email address; hdstaff@sju.edu. The message will also have the SJU Office of Information Technology header at the top and usually contain “IT Alert or IT Outage” in the subject line. There is also a standard Helpdesk signature that concludes the IT Alert or IT Outage emails.

You will also notice that our mailserver marked this message as SPAM in the Subject line.

____________________________________________________________________________

*
From: “Email Administrator” helpdesk.newsupdate@gmail.com
Sent: Thursday, January 13, 2011 3:30:22 PM GMT -05:00 US/Canada Eastern
Subject: {Spam?} Update

We are currently carrying out maintenances on our SJU Webmail, all users should provide their current User Name() and
Password word () on the space for validation.

Thanks for your understanding.

Copyright ©2004 Saint Joseph’s University
5600 City Avenue, Philadelphia, PA 19131•(610)660-1000

SJU Information Technology Helpdesk
Barbelin 30
helpdesk@sju.edu
610-660-2920

Spam Email: Thursday January 7th, 2011

By Joel Scott In Scam/SPAM Email January 7, 2011

Last evening at approximately 9:15pm another SPAM email was sent to the university (*see SPAM message below).

It is important to remember that the Office of Information Technology would NEVER send out such a message asking for anyone’s password via e-mail, over the phone, or in person. We receive many of these SPAM/Phishing attempts on a daily basis. The Helpdesk Staff ALWAYS posts information regarding the latest phishing attempt on our IT Blog located at http:/www.sju.edu/blogs/oit.

If you have already responded sending your information, you should IMMEDIATELY change your password from the Forgot Password link in the red login box on http://my.sju.edu so no one else can access your account. You should also notify the IT Help Desk at helpdesk@sju.edu or 610-660-2920 so that we can determine if your account has been compromised in any way.

This is a very serious matter. A single compromised account could jeopardize the security of all SJU members. So we ask that you do your part by keeping your password private.

A good way to know that an e-mail is fake and not from SJU IT is to please remember that employees of SJU will NEVER ask you to provide your User Id and Password via email. It is important to take note as to who the message came from, you will see in this case the sender is not using an SJU email address. When the Saint Joseph’s University Helpdesk sends out a message to the community, it will come from the email address; hdstaff@sju.edu. The message will also have the SJU Office of Information Technology header at the top and usually contain “IT Alert or IT Outage” in the subject line. There is also a standard Helpdesk signature that concludes the IT Alert or IT Outage emails.

______________________________________________________________________________________

*
From: Linden, Nancy
Sent: Thursday, January 06, 2011 9:06 PM
To: Undisclosed recipients:
Subject: HelpDesk

You have reached the limit of your email quota.
You will not be able to send or receive new mail until you boost your mailbox size.
Click the below link and fill the form to upgrade your account.
Click Here
Thanks
Technical Support
____________________________________________________________________________

SJU Information Technology Helpdesk
Barbelin 30
helpdesk@sju.edu
610-660-2920

SPAM Email: December 16th, 2010

By Joel Scott In Scam/SPAM Email December 16, 2010

Subject:	{Spam?} Important Notice
Date:	Thu, 16 Dec 2010 11:48:32 +0100 (CET)
From:	SJU Webmail Administrator <webadmin@sju.edu>
Reply-To:	peacoth.2ww@gishpuppy.com
To:	undisclosed-recipients:;

Dear SJU Webmail user,

You have almost exceeded your storage quota. To avoid possible loss of important data and deletion of your email account, please follow the link

below 

http://webadmn.megabyet.net/?778fbb6bf152777437b9470d4dfc976f6b07069cc6d88fe08c49badba42c771cceb740fe956afe7c937385cfb4e9d477

Best Wishes

SJU Webmail Administrator ______________________________________________________________________________________________________

Some things that stand out in this email that lead me to believe this is a SPAM email:

The Reply-To email address listed is NOT an SJU email address.
The link in which they ask you to click on is NOT directing you to an SJU website. Along those lines, if you are in fact over your quota at SJU you WILL NOT be asked to click on any links (or provide your username and password)

Phishing Attempt – December 1, 2010

By Joel Scott In Scam/SPAM Email December 1, 2010

From: “System Administrator”
To: undisclosed-recipients:;
Sent: Wednesday, December 1, 2010 8:58:07 AM GMT -05:00 US/Canada Eastern
Subject: {Spam?} Your Mailbox Have Exceed Limit.

Your mailbox have exceed the limit of 20MB which set by your system administrator, you will not be
able to send or receive mail except your revalidate your account, to revalidate your account click
on the link below.

http://www.eSurveysPro.com/Survey.aspx?id=7e0b589c-405e-4842-b51d-5a031716a744

Fill out the details request and click on finish and you will receive a confimation mail that
your account have been revalidated.

Thanks

SPAM Email: October 27, 2010

By In Scam/SPAM Email October 28, 2010

From: “Webmail Administrator”
To: undisclosed-recipients:;
Sent: Wednesday, October 27, 2010 10:57:52 PM GMT -05:00 US/Canada Eastern
Subject: Email Account Upgrade Notification Letter ( Upgrade Now )

We have upgraded to 500MG Email Space, login into your
account to confirm if your account is still active.

Click the link below to login into your account for
confirmation and upgrade.

http://www.cursoprogressao.com.br/form/use/webmaster/form1.html

Note: If you have not been upgraded, click the Upgrade To
500MG check box.

Failure to upgrade/confirm your account will lead to an
assumption that this account is no longer monitored and will result to complete
deactivation.