Known Phishing Emails

Attention

    • University communities are prime targets for phishing emails. The goal of these emails is to maliciously obtain an individual’s personal information by impersonating a credible source. The attack is an effort to access your username, passwords, social security number, credit card numbers, etc.

      Information Technology will not ask for your personal or account information in an email. Always question email requests of this type. Providing this information could compromise your account and the accounts of others on campus. IT has security measures in place that attempt to block spam and phishing emails, but some will make it through.

      The section below represents phishing emails that have been shared with the Department of Information Technology. To expand the full message, click on the tabs below.

      If you believe that you have received a phishing email, and it is not displayed in the list below, please report it here.


Reported Phishing Emails

Subject: [Secured]Security Announcment : Meltdown & Spectre

Date: 3/1/2018




(This email does not meet the standard criteria of a typical phishing email. The link goes to a non-semo.edu domain page, it also references a "help desk quarantine portal" which does not exist. If you are ever unsure of an email's authenticity, please contact the IT Help Desk.)




3/1/2018 Phishing Message

Subject: Part time Pet sitter/ Walker Needed.. $300 weekly.

Date: 2/27/2018




(This email does not meet the standard criteria of a typical phishing email. If you respond to this email you will be asked to provide many types of personal information. If you are ever unsure of an email's authenticity, please contact the IT Help Desk.)




2/24/2018 Phishing Message

Subject: Job Opening

Date: 2/24/2018




(This email does not meet the standard criteria of a typical phishing email. If you respond to this email you will be asked to provide many types of personal information. If you are ever unsure of an email's authenticity, please contact the IT Help Desk.)




2/24/2018 Phishing Message

Subject: Update Now

Date: 2/9/2018





This message is from : Office365 Help Desk Center, Due to the current on going upgrading of our database and e-mail account center i.e homepage view, enhanced security installations of new 2018 anti-spam and anti-virus software, large mailbox space.Your email account have been affected during this upgrade and you will need to verify your account so you don't loose vital data.



Kindly verify your e-mail within 24 hours so it doesn't get suspendeda.
Please do verify your email.

Thanks for your co-operation,

Office365 IT Help-desk.
Copyright 2018.

Subject: E-mail Disconnection Alert, Validate Now  

Date: 1/8/2018




MailBox De-activation©
Hi ~REDACTED~@semo.edu
We are doing a spam and fraudulent verification survey, which your e-mail account ~REDACTED~@semo.edu was listed and has recently been updated.
It's important you verify your account to help us survey your account better. ~REDACTED~@semo.edu Verify Your Account Now ~REDACTED~
If verification is not gotten from you in the next 48hr, we will assume you are a fraudulent user and shut down your email account,
till a proper verification recovery before you can access your account again Thanks.
Admin ! ©2017 All Rights Reserved
This email was generated for %0% with reference no. 2147dfff45634547122ab768 27916310
This is an automated message replies cannot be answered A ~REDACTED~ ccount setting

Subject: Your Account Security Requires An Important Update

Date: 10/19/2017



We have detected an error in your account information. To avoid any discontinuance to your PNC Online Services, we require you to update your account security by following these steps:

* Sign On to your PNC online account.
* Set up your Security Questions and enable Two-Factor Authentication security method.

======================================================================================
To protect your account please follow the link below and update your security details:

https://pnc-online.pnc.com.makejob.com.br/index.php?id=4012020A81A32685898394D?email=~REDACTED~@semo.edu
If the link above is not clickable, please copy and paste URL into the 'Address' field of your web browser.
======================================================================================

© Copyright 2017. The PNC Financial Services Group, Inc. All Rights Reserved.

Subject: Offer Review Requested for Pending Claim - ~REDACTED~

Date: 10/19/2017



PLEASE DO NOT REPLY TO THIS EMAIL. Comments and/or questions can be sent via the secure online portal upon log in from the link below.

Attention: Patient Accounts Manager

The Lewer Agency has contracted with MultiPlan to facilitate resolution of a claim submitted by SEMO State Sports Medicine with a billed total of $90.00.

A member of our Negotiation Services team has analyzed the claim and has issued an offer for your consideration.

To view and respond to this offer, please click on the link below, or paste the link into your browser to access our secure online portal. From there you will be provided with full offer details for this claim, along with any other claims that are pending your response. If you are not the person responsible for billing, please forward this email to the appropriate billing representative or manager for review.

Link: ~REDACTED~

For technical issues, or if you experience problems accessing the online portal, please contact us via ~REDACTED~@multiplan.com.

Regards,
MultiPlan Negotiation Services

MultiPlan Reference Number: 1~REDACTED~N
P-2~REDACTED~5(T-111)


NOTICE OF CONFIDENTIALITY: Information included in and/or attached to this transmission may be confidential. This transmission is intended for the addressee(s) only. Any unauthorized disclosure, reproduction, or distribution of and /or any unauthorized action taken in reliance on the information in this transmission is prohibited. If you believe that you received this transmission in error, please notify the sender by reply transmission and destroy the transmission without copying or disclosing it. We may also need to contact you for additional information as required by HIPAA or state law.

Subject: Inbound Activity Error: Failure sending mail!  

Date: 10/12/2017



Dear Client,

Your storage space for Office account: is almost full.


89% Used

To prevent your Incoming/Outgoing mail from getting bounced back,


click here to add additional 10 gig free and mandatory storage.

© 2017 Microsoft
Terms of use Privacy & Cookies

Subject: Faculty and Staff  

Date: 10/10/2017



Please note that your Mailbox Filter is not active. Kindly Update/ Now to get new mails.

Thank you,
Webmail Administrative

ITS support for Faculty and Staff

Subject: FGM: [~REDACTED~@semo.edu] 10 Octobеr 2017 03:43:14 This time it will not be so easy to get off  

Date: 10/10/2017


Hello,

I do not presume to judge you, but as a result of several cases, we have point of contact from now. I do not think that caress oneself is very ill, but when all your relatives, colleagues and friend see it- its definitely awful.

So, closer to the point. You surfed the internet with роrn, which I’ve seized with the virus. After you chose video, virus started working and your device became acting as dedicated desktop since that moment. Naturally, all cams and screen started recording instantly and then my soft collected all contacts from your device.

I text you on this e-mail address, cuz I’ve collected it with my soft, and I make no doubt you for sure control this work e-mail.

The most interesting point that I created video, on one side it shows your screen record, on second your cams record. Its very funny. But it was sophisticated .

As a conclusion- if you want me to erase all this compromising evidence, here is my Bitcoin wallet address- ~REDACTED~ (it must be without «spaces» or «=aquo;,check it). If you do not know how to use it, you can ask google or youtube for help- its very easy. It seems to me, that 350 usd will finish your problem and will destroy our point of contact . You have thirty hours after opening this message(I put special pixel in it, ill know when you open it). If you will not finish transaction, ill share the evidence with all contacts I’ve collected from you.

I do not think that cops can find me for only one day(not even 10 days), so think twice, you can lose your honor. Sorry for misprints, I am foreign.

Subject: RE: ITS Email Verification  

Date: 10/03/2017




Dear Staff Member,

Due to the on-going security upgrade, All Staff members are required to update their information to the new security system to enable a faster, easier and more secure e-mail experience CLICK-HERE

Information Technology Services (ITS). Email Verification & Mail Quota Update.


Subject: Fwd: AWB Arrival #9725427350  

Date: 10/02/2017




Dear Sir/Madam,
We are happy to announce to you that your AIRWAYBILL Arrived safely, below is the details of your AWB
10/2/2017 Spam Message

Subject: FW: Payment Advice (REF 43280)  

Date: 09/21/2017




Dear helpdesk,


Please be informed that the current month pay slips are ready for your collection. Kindly view or download a copy of the transfer slip.


Scan008.pdf https://e-learn.uacg.bg//group/bg-cache/?email=helpdesk@semo.edu View | Download https://e-learn.uacg.bg//group/bg-cache/?email=helpdesk@semo.edu


Thanks

Mitchell Smears
Finance Department

Subject: Subscription  

Date: 09/11/2017




Microsoft Outlook

Dear Admissions

Your Office 365 subscription has an unresolved change. To keep using your Office 365 without interruption, please sign in now.

SIGN IN

Microsoft Office Team
Note: This message was sent from an unmonitored email address. Please do not respond to this message.

Microsoft Corporation
One Microsoft Road
Redmond, WA 98052, USA

Ⓒ 2017 Microsoft Corporation. All rights reserved

Subject: Voice Message from 014102401002 - name unavailable  

Date: 09/06/2017




Time:Wed, 06 Sep 2017 09:29:30 +0700
From: 014102401002 - name unavailable
Click to listen Voice Message

Subject: EMAIL ACCOUNT CLOSURE  

Date: 08/25/2017




Dear ~REDACTED~@semo.edu

All School email account holder are to upgrade their school email address now, following the link below via office365 server, failure to upgrade your email account will lead to the closure of your school email account



UPGRADE NOW

You have received this message securely from IT Help Desk

Subject: Password Reminder  

Date: 08/16/2017




Dear Member,

Your SEMO university password will expire today 8/16/2017, please renew.

www.semo.edu/inbox/password/reminder/renew

Thank you,

Southeast Missouri State University

Subject: Semo.edu - important message from admin faculty.  

Date: 08/15/2017




Dear user,

You have 5 important messages from your faculty admin.

Click the url below to read

https://www.semo.edu/admin/faculty-portal/

Thanks

Semo.edu IT

Subject: PART-TIME JOB OFFER ASAP  

Date: 08/14/2017




(This email does not meet the standard criteria of a typical phishing email. If you respond to this email you will be asked to provide many types of personal information. If you are ever unsure of an email's authenticity, please contact the IT Help Desk.)

Are you available for a personal assistant job offer?

Mrs Gary

Subject: Payroll Information  

Date: 08/13/2017




Dear Member,

1 New Notification Regarding Your Payroll

www.semo.edu/hr/payroll/deduction/information

Best Regards,

Southeast Missouri State University

Subject: Your order has shipped [ID7625-5690]  

Date: 08/7/2017




Dear ~REDACTED~@yahoo.com,
This email confirms your purchase of the following subscription
Name of Subscription: Pandora Premium Plan
Application: Music and Radio
Content Provider: Pandora Media, Inc
Date of purchase: 7 August 2017
Subscription Period: 3 month
Price: 97.99
Payment Method: S-Payment
The subscription period will automatically renew unless you turn it off no later than 48 hours before
the end of the current period. To cancel auto-renewal or manage your subscriptions, click below
and sign in.
You can cancel a Subscription at any time: Cancel / Refund Subscriptions
Regards,
The iTunes Store team




Apple respects your privacy.
Information regarding your personal information can be viewed at https://www.apple.com/privacy/

Copyright © 2017 Apple Inc. All rights reserved

Subject: This is your email administrator  

Date: 08/1/2017




ATTENTION!
=========================

Dear User,

This is your webmail administrator. Please,be informed that the email server has just been upgraded and your email needs to be reset immediately.

This process is to keep the Southeast Missouri State University system server updated and protected as always.

CLICK BELOW TO RESET YOUR EMAIL NOW:

https://login.microsoftonline.com.common.oauth2.osharenabaguio.com/s/index.php


Regards,


Southeast Missouri State University

Subject: Important course form  

Date: 07/24/2017




Dear Student / Employee ,

An important course form has been posted to you through the Blackboard learning System.

Click "Blackboard Portal" immediately to view the formBlackboard Portal

IT Help Desk

© Southeast Missouri State University

Subject: Payroll Notification  

Date: 07/23/2017




Dear Student / Employee,

2 New notification regarding your 2017 Payroll

Please use the reference with your registered details to view the notification.

https://login.semo.edu.microsoftonline.com/common/oauth2/authorize?client_id=

SEMO IT Help Desk

© Southeast Missouri State University

Subject: Important Payroll Notification  

Date: 07/22/2017




Dear Student / Employee,

1 New notification regarding your 2017 Payroll

Please use the reference with your registered details to view the notification.

https://login.semo.edu.microsoftonline.com/common/oauth2/authorize?client_id=

SEMO IT Help Desk

© Southeast Missouri State University

Subject: Your account has been disconnected  

Date: 07/21/2017




Dear Student / Employee ,

You have important message from SEMO IT Help Desk to restore access to your profile.

Please use the reference below to restore access please update to avoid disconnection to your account profile.

Restore your profile.

Regards

SEMO IT Help Desk

© Southeast Missouri State University

Subject: Restore access to your account  

Date: 07/19/2017




7/19/2017 Spam Message


Please note that your SEMO NetID account is about to expire for the month. In order for it
to remain active.

Please use the link below to proceed and update your account.




https://login.semo.edu.microsoftonline.com/common/oauth2/authorize?client

Subject: Important Notification  

Date: 07/19/2017




Dear Student / Employee ,

You have 2 important message from your school faculty.

Please use the reference below to view message.

View here.

Regards

SEMO ITS

© Southeast Missouri State University

Subject: Support from MS-Office  

Date: 07/13/2017




7/13/2017 Spam Message

Your E-mail on our server has reached it's Limit.

You are required to rectify this problem in-order to avoid loss of messages from/to your contacts

Verify ~REDACTED~@semo.edu now to avoid this.

Thank you

Ms PRO

Subject: Document Received : (Scanned Agreement.Pdf-00784)07-07-2017  

Date: 07/07/2017




7/7/2017 Spam Message

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager.

Subject: Validate Your Account  

Date: 07/06/2017




This is to notify all Students, Staffs and Alumni that we are validating active accounts.Kindly confirm that your account is still in use by clicking the validation link below:
Validate Email Account

Sincerely,
IT Help Desk
Office of Information Technology

Subject: URENT: EMAIL ACCOUNT CLOSURE  

Date: 07/05/2017




Dear ~REDACTED~@semo.edu,

All School email account holder are to upgrade their school email address now, following the link below via office365 server, failure to upgrade your email account will lead to the closure of your school email account


UPGRADE NOW

You have received this message securely from IT Help Desk

Subject: Parcel 008129055 delivery notification, UPS  

Date: 06/30/2017




Dear Customer,

Your item has arrived at the UPS Post Office at June 27, but the courier was unable to deliver parcel to you.

You can download the shipment label attached!

Respectfully yours,
,
UPS Support Clerk.

Subject: RE: Helpdesk  

Date: 06/29/2017




________________________________

This is to notify all Staffs and Alumni that we are validating active accounts. Kindly confirm that your account is still in use by clicking the validation link below:


Click here to Validate e-mail Account now {Link intentionally removed.}

Sincerely
Help-Desk

Subject: Server upgrade notification  

Date: 06/27/2017




Dear Student / Staffs

This e-mail is to notify you that we are having a server overload therefore we will be upgrading our server.
We need you to use the semo secure reference link to keep your account active after the upgrade. Upgrade Now

(This message was generated automatically)
----------------------------------------------

IT Services, Southeast Missouri State University
One University Plaza Cape Girardeau, MO 63701

Subject: Pending Message Notification  

Date: 06/26/2017




Dear User,

Your incoming mails were placed on pending status due to the recent upgrade to our database,
In order to receive the messages click here. to login and wait for responds from ITS.

SEMO ITS

Thank you.

Southeast Missouri State University

Subject: Important message  

Date: 06/25/2017




Southeast Missouri State University

Please note that your SEMO NetID account is about to expire for the month. In order for it to remain active.
Please use the link below to proceed and update your account.

{Link intentionally removed.}

Subject: Welcome  

Date: 06/22/2017




Clutter behind the scenes

For some time, Your quota for your service have been exhasted , you are advised to follow reactivate in order to avoid account termination

Your message will not be delivered. Despite repeated attempts to deliver your message, Contact the outlook with the link and ask them to tell their email admin that it appears that their email system is refusing connections from your email server.

{Link intentionally removed.}

Subject: MS365 Activation  

Date: 06/13/2017




Your qouta for your E-mail has been exceeded , You might not recieve emails in 24 hours

Please Click Here To Validate.
Thanks
2017 Domain

Powered by Microsoft Outlook

Subject: Account Will Be Closed  

Date: 06/02/2017




Microsoft Office365

Dear ~REDACTED~

Your Microsoft E-mail has exceeded it's mail quota on our server.

You will be unable to receive messages within 24hrs if you don't validate your E-mail Address.
Please Click Here To Validate.

Thanks.
The Microsoft Team

Powered by Microsoft Outlook

Subject: ACCOUNT UPDATE  

Date: 05/30/2017




This is to notify all Students, Staffs of Southest Missouri State University that we are validating active account.Kindly confirm that your account is still in use by clicking the validation link below:

Validate Email Account

Sincerely
IT Help Desk
Office of Information Technology
SEMO University

Subject: New Payroll Information  

Date: 05/18/2017




Dear Member

1 New Notification Regarding Your Payroll

www.semo.edu/hr/payroll/may/newpaydate

Thank You,

Southeast Missouri State University

Subject: Verify Now  

Date: 05/09/2017




Dear ~REDACTED~

We have received a request to reset your password. If you made this request, Please ignore this message. But if this request was not from you, click on Verify Now button below to cancel this request immediately.

Verify Now

You have less than 72HRS to complete

Account Secuity Team


Copyright 2017

CONFIDENTIALITY: This e-mail (including any attachments) may contain confidential information. Unauthorized disclosure or use is prohibited. If you received this e-mail in error, please notify the sender and delete this e-mail from your system.

Subject: RE: IT Annual Maintenance  

Date: 05/05/2017




IT Service Desk require you to upgrade to the latest Microsoft Exchange 2017 with 15GB mail quotas, kindly Click on Outlook Web Apps to upgrade to the latest Microsoft Exchange 2017

Connected with Microsoft Exchange
© 2017 Microsoft Corporation. All rights reserved

Subject: Tim Wenkel has shared a document on Google Docs with you  

Date: 05/03/2017




Tim Wenkel has invited you to view the following document:

Open in Docs

Subject: RE: Admin  

Date: 04/26/2017




We have currently upgraded our Server to 50GB inbox space.Please log-in to your user account to validate E-space. Your emails won't be delivered by our server,unless email account is confirmed. protecting your email account is our primary concern,for account update Click faculty and stafff





















This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of Maryknoll School. Warning: Although precautions have been taken to make sure no viruses are present in this email, Maryknoll School cannot accept responsibility for any loss or damage that arise from the use of this email or attachments.

Subject: Warning...  

Date: 04/25/2017




Starting from 26th of April you will be barred from using this email platform to send or receive message.

Reason: Fake profile detection

In order to continue using this service, Refer to attached pdf to authenticate your profile.
Thank you,
Microsoft Support

Subject: How Are You Doing???......M.Jill Lauman  

Date: 04/23/2017




(This email does not meet the standard criteria of a typical phishing email. If you respond to this email you will be asked to provide many types of personal information. If you are ever unsure of an email's authenticity, please contact the IT Help Desk.)

Hi there

Please I need a quick favor?

Thanks
M.Jill Lauman

(After responding to the email you will receive this message which leads to spam)

Thanks for your email, I'm in Manila, Philippine right now with my family on Holiday and I'm short on cash right here, I tried to access my account from the cash machines here and it's not working, I went to the bank to withdraw and I was informed that I cannot withdraw money from my account in some countries,that it's network errors, I'm thinking if I could get a quick loan of $2,500 from you or anything you can afford to loan me so that I can clear some little things here and also take a cab to the airport. I promise to refund it as soon as I get back home on Wenesday morning, let me know so I can send you my details.

Waiting to hear from you.

Thanks
M.Jill Lauman

Subject: urgent  

Date: 04/09/2017




Dear User,



We have received your request to Empty our Inbox and Sent Folder



Your request is currently being processed, if you did not authorize this request.



You can cancel this action via the link below.



Cancel-Now



Webmaster



Subject: Re: I. T HELP DESK  

Date: 04/05/2017




Several of your incoming mails were placed on pending status due to a recent upgrade to our data, In order to receive the messages Click faculty and staff to login and wait for response from Administrator, we apologies for any inconvenience and appreciate your understanding.

Reminder from Admin
To all faculty and Staff Student


CONFIDENTIALITY NOTICE: This email and any files transmitted with it are the property of Cannon School. The contents of this communication are confidential and may contain information that is privileged and/or exempt from disclosure under applicable law. It is intended solely for use of the individual or entity to whom this email is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and immediately delete this message and any attachments. Any unauthorized use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited.

Subject: Tutor  

Date: 03/09/2017




Hello,

 I'm John Naoki, During my search for a lesson teacher that would help in taking my son (Kenneth) During is stay in your location. I found your advert and it is very okay to me since you specialize in the area I'm seeking for him, My son would be coming to your city before the end of this month for a period of time with his friend, I'll like to know if you can help in taking him for the lesson? just to keep him busy and refresh. Kenneth is 11 years old, So kindly let me know your charges per hour/lesson in order for me to arrange for his payment before he travels down to for the lessons to commence.

 He will be staying there for 2 weeks and Please Reply back on:

(1). Your charges per 2 hours (3 times a week for 2 Weeks):starting from 20th February until 3rd April 2017

(2) Total Cost For 6 class/12 hours lessons in 2 Weeks

(3). The Day you will be available to teach him During the week:

 Well am very happy that i see you as my son tutor and about your years of Experience there is no problem about the lessons, My son will be coming with his caregiver. So there is no problem for the lesson to commence by next week, my son caregiver will be bringing him to your location for the lessons and you can teach him anywhere around you including the Library or your home if that is okay by you so i will like you to teach my son the best of you when he get to the city for the lessons. I will like you to email me with your schedule for the lessons,I will like you to email me with the name on the check and Full mailing address where the check will be mailed to and including your Home and Cell phone number for my attorney to issue out a check to your before leaving the the state, by this week, I will be awaiting to read from you soon with your name and address.

Best Wishes.
John.

Subject: Urgent Mail Update Required  

Date: 03/06/2017




Hi YourEmailHere@semo.edu,


96% used volume

4% unused volume.

Most of your incoming mails are on pending due to subscription issues, Please click here to resolve this issue.

Best Regards
Mail Team (C) 2017

Subject: REVIEW  

Date: 02/06/2017




Find attached document (Protected) pdf file for your perusal and details confirmation.


REGARDS

BANDAR GROUP
Ashfaq Mohammed

(Accounts Manager)

Kingdom of Saudi Arabia

Mob: +966 501448953

Subject: mailbox  

Date: 02/03/2017




Subject: mailbox  

Date: 02/03/2017


IT Service Desk require you to upgrade to the latest e-mail Outlook Web Apps 2017 , kindly Click on IT Service Desk to upgrade to the latest e-mail Outlook Web Apps 2017

Connected with Microsoft Exchange
© 2017 Microsoft Corporation. All rights reserved

Subject: Uber Notice  

Date: 01/31/2017




Dear Email Beneficiary,

Your email address won in the first category of the on going UBER ONLINE LOTTERY
2017.
Inconjunction with UNITED NATIONS. This is a Millenium Internet Game in which
e-mail address were used and first of its kind.

You did not purchase any ticket to enter for it, as an internet user your email address
was randomly selected and you are one of the selected Winners among 15 winners
worldwide. (Winning number 853 709 1 and Ref Number UB/UN853 Batch Number
UBSA187/527.
)

The numbers fall within the American, European & Australian Location file, AMOUNT
WON: $1,500,000.00.
For further information please Contact Mr. Brown Lekota with
your winning details. Via Email: U-734@dr.com

Yours Truly,
Mrs Franka Mark
Uber Online Lottery Coordinator

Subject: Password Notification  

Date: 01/23/2017




Dear Member,

Access To Your Southeast Missouri State University Webmail Account Will Expire Today 01/23/2017

www.semo.edu/owa/auth/renew

Best Regards,

2017 Southeast Missouri State University.

Contact

IT Help Desk

(573) 651-4357
helpdesk@semo.edu
Memorial Hall 107

IT Office

(573) 651-2217
One University Plaza
Cape Girardeau, Missouri 63701