From: Central Michigan University [mailto:outlookverification2@virginmedia.com] <–Not a Michigan address–not the same as the originating school/company name
Sent: Tuesday, June 27, 2017 1:31 PM
Subject: CMU: Webmail Account Verification Alert!
Dear CMU User,
We noticed your CMU Webmail account has almost exceed it’s limit.And you may not be able to send or receive messages any moment from now.
Click Here To Renew Your Webmail Account. <[http://www[DOT]rci[DOT]stavsu[DOT]ru/administrator/backups/login%5bDOT%5dhtml]http://www[DOT]rci[DOT]stavsu[DOT]ru/administrator/backups/login[DOT]html>
NOTICE:
Failure to renew your CMU Webmail account. It will be permanently disabled.
Thanks,
| CMU. ICT Department…
Copyright Central Michigan University.
Posted in Security, syndicated-posts
From: ADP Payroll [run.payroll.invoice@performancesales.com] <— Not an ADP nor Wesleyan address
Sent: Monday, June 26, 2017 1:08 PM
To: Carrier-Brault, Roslyn
Subject: ADP Payroll Invoice for week ending 06/24/2017 – 02406. Invoice: 00162774
Your ADP Payroll invoice for last week is enclosed for your review. If you have any questions regarding this invoice, please contact your ADP service team at the number provided on the invoice for assistance.
Please click below to view your invoice:
ADP INVOICE 00162774 <—- This link, if hovered over, would show the following modified address that is NOT associated in any way with ADP (http://enrollinstantly.com/file.php?document=cmJyYXVsd0000000000bi5lZHU=)
Thank you for choosing ADP Payroll.
Important: Please do not respond to this message. It comes from an unattended mailbox.
[unsubscribe]unsub[unsubscribe]
Posted in Security, syndicated-posts
From: Denise El Havat Pickler [mailto:denisepickler@camarapoa.rs.gov.br]
Sent: Saturday, June 24, 2017 6:41 PM
Subject: 1,650,000,00 Euros.
Your email has been registered and insured with the sum of 1,650,000,00 Euros. For more information please contact : onuwu17@qq.com
My Friendly Greetings
Denise El Havat Pickler
——————————————————–
This is SPAM and not really a phishing email but does give reference to having your email registered. It is completely, fake. (SPAM tries to trick you out of money. PHISHING email try to trick you to providing your credentials for nefarious purposes)
Posted in Security, syndicated-posts
From: “U.S. Tax Court” <tegvi@geheimserver.de> <–Not a US Governmental web designation. That’s “.gov”
Reply-To: “tegvi@geheimserver.de” <tegvi@geheimserver.de> <–Not a US Governmental web designation
Date: Thursday, June 15, 2017 at 10:43 PM
To: “xxxxx, xxxxx” <xxxxx@wesleyan.edu>
Subject: Tax Notification #5693896
U.S. Tax Court ext#5693869
We inform you that you were suspected in violating of the U.S Federal law under “Title 26 USC § 7201 – Attempt to evade or defeat tax”.
The case hearing will be held on 06/17 at 2:30PM in room 6B. Case number is 228-157643.
In case you or your representative are not able to face the court on the this day, please inform us by sending a respond to this email with the specified reason. The response has to be sent not later than 10 workdays before the first hearing.
List of documents you have to provide in court and additional information can be found in an attached file.
Tax Notification <–this points to a Googledoc. The US Government would not use googledocs. Additionally, they do not email. They only use the US Postal Service.
Deirdre Quinn, <–non-existant person
Chief Secretary Prosecutor, <–non-existant position
400 Second Street, N.W., Washington, DC 20217
Posted in Security, syndicated-posts
From: “support@wesleyan.edu” <beckie@insitehealthteam.com> <–The “from” address looks valid but etc actual email address to the immediate right is not.
Date: June 7, 2017 at 6:19:09 PM EDT
To: “xxxxxx” <xxxxx@wesleyan.edu> <–valid recipient at Wesleyan but name removed for privacy
Subject: Payroll Notice
1 new unread notification
View now <–http://www.sagaevents.xxx.ph/wesleyan.edu/ Not a valid Wesleyan Address. All of our addresses begin with “www.wesleyan.edu”
Copyright 2017,
Posted in Security, syndicated-posts
From: Malin Sjöberg <Malin.Sjoberg@humana.se> <—-Not a Wesleyan Address
Subject: Current issues – IT DESK services
Date: June 7, 2017 at 4:46:34 AM EDT
To: Undisclosed recipients:;
We are currently experiencing cooling issues in our data center at 4210 Labelle St. To avoid data loss and hardware damage, IS Division is shutting down all non-business critical applications.
You may experience issues reaching or accessing those resources.
IS Division is working actively on resolving the problem ASAP, but we may need to extend this emergency measure to other more critical applications. You are hereby directed to click on ITS HELPDESK to update your mail to continue usage. The link goes to a truncated non-Wesleyan link/site if you hover over it (http://bit.ly/xxxxAPTWxx)
Thank you for your patience,
ITSS. <—not a Wesleyan department and no signature/specific name.
Posted in Security, syndicated-posts
The PeopleSoft Student System and WesPortal will be down from Friday June 9th at 3:00 PM until Saturday June 10th at 5:00 PM for a system/security upgrade.
Moodle, WFS, Directory, EMS, Library, Gapps and Calendar can all be reached from the Tools dropdown on the Wesleyan Home Page: www.wesleyan.edu .
Posted in Security, syndicated-posts, Urgent
From: Helpdesk [mailto:djgonzalez@uninove.edu.br] <—-Not a Wesleyan address
Sent: Saturday, June 03, 2017 2:42 PM
To: helpdesk@sparkautomation.co.in
Subject: Verify Your Account
This e-mail has been sent to you by Office 365 to inform you that we were unable to verify your account details. This might be due to either of the following reasons:
1. A recent change in your personal information. (eg: address, phone)
2. illegal use of your account.
Due to this, to ensure that your email service is not interrupted, we request you to confirm and update your information today by following the link below
This link went to a bit.ly site and not a Wesleyan page.
Office 365! Mail Product Management
Posted in Security, syndicated-posts
Boer JH de, Joyce <jo.h.de.boer@st.hanze.nl> <— Not a Wesleyan address
Due to regular spam coming from mail user we have decided to add security to mail user account to prevent your mail from being use from sending spam mail and also change our login site, Kindly LOGIN to verify and secure your mail and added 1 GB to your mail.
Server Desk.
Service Provider
The Link pointed to a non-wesleyan name/address: http://owahelpservengmix.hcl.xxx/
Posted in Security, syndicated-posts
May. 30, 2017 by Karen Warren
The WesPortal/Portfolio and PeopleSoft Student Database will be down for maintenance on Wednesday, May 31st, from noon until 1pm.
Posted in maintenance, syndicated-posts
