From: Raul Castillo Rojas [mailto:rcastillo@imarpe.gob.pe]
Sent: Wednesday, April 19, 2017 6:37 PM
Subject: Attn
Your Mail Box Exceeded it storage limit CLICK HERE TO UNBLOCK Fill and click SUBMIT for more space or you wont be able to send Mail.
——————————————————————————————————————————————————–
There is no signature, the From address is not a Wesleyan.edu and the link goes to a googledock that is infected with a payload.
Posted in Security, syndicated-posts
From: IDA CALDERON [mailto:wendi.ammern@t-online.de]
Sent: Wednesday, April 19, 2017 11:45 PM
To: graduateoffice
Subject: Hiya
What’s Up?
I visited your website recently..
I’m currently looking for work either part time or as a intern to get experience in the job fiield.
Please review my CV and let me know what you think.
Attached to my google drive here
My resume is password protected. The password is 123456
Thanks,
—
IDA CALDERON
——————————————————————————————————
The link attached to a download on a google drive account. It was not a Wesleyan address. Nor is the “From” address.
Posted in Security, syndicated-posts
Please, not the non-wesleyan address in the “From” field. Additionally,the link is accurate but is a redirect to an unknown address.
Posted in Security, syndicated-posts
From: Manuela Lopez Florez [mailto:Manuela.LopezFlor001@umb.edu]
Sent: Monday, April 24, 2017 10:45 AM
Subject: Resolve issues now
Dear User,
Your email account has been compromised and to remain active on our database. Please click here
————————————————————————————————
Please, note the “from” address is not Wesleyan. Additionally, when you hover over the now, broken link it pointed to….http://socialing.com/periodics/cgi-binx/oxc684uue799273927203scanPDF/Sign%20In.xxx (the link has been modified to not work to avoid the curious cutting-and-pasting).
Posted in Security, syndicated-posts
Apr. 19, 2017 by juliangoldfield
—–Original Message—–
From: helpdesk00@wesleyan.edu [mailto:helpdesk00@wesleyan.edu]
Sent: Tuesday, April 11, 2017 5:04 PM
Subject: [SPAM=18.8] Protect Your Account Now
Wesleyan University Webmail System is warning you for the last time that your password have reach his time-limit. For security purposes, please CLICK HERE <link removed> to re-validate your account.
Note: Failure to do so would affect access to His/Her email account from 15th of April 2017.
Regards
HELP DESK
Posted in Security, syndicated-posts
Apr. 18, 2017 by Karen Warren
Dragon will be unavailable between 10 and 10:30PM on Tues, April 18. Please be sure to save any files prior to this time.
Posted in maintenance, syndicated-posts
—–Original Message—–
From: USPS [mailto:test@familiesonline.co.uk] <–NOT A Wesleyan ADDRESS
Sent: Friday, April 07, 2017 3:48 AM
Subject: Parcel intercepted
UNITED STATES POSTAL INSPECTION SERVICE
PO BOX 555, NEW YORK NY 10116-0555
This is to notify you that we have intercepted your parcel from USPS COURIER SERVICE is making the delivery and we have stopped the delivery process for some security reasons stated below:
Our scanning system has detected that your parcel contains a confirmable CARD to the tune of US$6,500,000.00 USD.Such parcel coming from African /Europe/Asia is been verified by the postal inspection service.
Also for the Delivery of the Parcel to continue, you are in obligation to obtain from Spain, a Duly Sworn Affidavit from Spanish High Court which will back up the Origin of Fund. This is in line with the Anti-Terrorist Campaign which the USA Government has embarked on recently to protect our Territory from future attacks. You should therefore contact the sender of the CARD or the USPS Courier Agent in Madrid Spain to get the Sworn Affidavit for you while we wait to receive from you the Affidavit File Number to enable us forward your CARD to your address.
Below is his contact information. Note that the cost of the Affidavit is
US$198 and do not hesitate to remit the amount to him.
Name: Mr Shane Ambrose
Email address:
ambrose.shane@yahoo.co.nz
We shall then forward the CARD to you and you will be sure of a genuine CARD that is coming to you. We are doing this for your interest considering the rate which fraudulent and stolen checks/CARD are been sent to our innocent citizen that most times put them in problem.
Your urgent action on this notice will be appreciated.
Sincerely,
GUY COTTRELL
Chief Postal Inspectors
Posted in Security, syndicated-posts
—–Original Message—–
From: UNI WEB. [mailto:amit@icapl.com] <—THIS IS NOT A Wesleyan address
Sent: Tuesday, April 11, 2017 5:12 PM
Subject: ****SPAM*(9.5)**** Dear Webmail Account Owner,
Dear Webmail Account Owner,
This is our second message to you from the University Webmail Messaging Center to all email account owners.
We are currently carrying out scheduled maintenance,upgrade of our web mail service and we are changing our mail host server,as a result your original password will be reset.
We are sorry for any inconvenience caused.
To complete your webmail email account upgrade, you must reply to this email immediately and provide the information requested below.
*********************************************************************************
CONFIRM YOUR EMAIL IDENTITY NOW
E-mail Address:
User Name/ID:
Password:
Re-type Password:
************************************************************************************
Failure to do this will immediately render your email address deactivated from the University Webmail.
************************************************************************************
This E-mail is confidential and privileged. If you are not the intended Recipient please accept our apologies; Please do not Disclose, Copy or Distribute Information in this E-mail or take any action in Reliance on its contents: to do so is strictly prohibited and may be Unlawful.
Please inform us that this Message has gone astray before deleting it.
Thank you for your Co-operation.
Copyright ©2011 University Webmaster. All Rights Reserved
Posted in Security, syndicated-posts
Apr. 11, 2017 by Karen Warren
ITS experienced a major system outage on the primary (core) network switches that made all network services unavailable for about 15 minutes. We are investigating the cause of this issue and will report back to the community. Services are now coming back online. We will update the community as we know more.
Posted in syndicated-posts, Urgent
