Cyber Alerts

Phishing Alert - Your mailbox has exceeded the storage limit.

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

From: Berlin, Michael [mailto:miberlin@ursinus.edu]

Sent: Monday, October 05, 2009 6:37 AM

Subject: Your mailbox has exceeded the storage limit

Your mailbox has exceeded the storage limit which is 20GB as set by your administrator,you are currently running on 20.9GB, you may not be able to send or receive new mail until you re-validate your mailbox. To re-validate your mailbox please CLICK HERE: http://p1.fr/sw72k <http://p1.fr/sw72k> Thanks System Administrator

Phishing Alert - Clemson Account Update

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

Sent: Sat Sep 19 08:31:26 2009
Subject: CLEMSON ACCOUNT UPDATE

Att: Email Account Owner, This message is from net-working messaging unit to all email account owners. We are currently upgrading our data baseandemail account, we are delecting all unused email account to creat more space for new accounts.
You are to provide to us the below, information to eneble us upgrade your account from clossing.

Email Username
EMAIL Password

Thanks.

Virus Alert - Emails Containing .zip Files may contain Virus's

Clemson Users have been receiving spam messages that may contain a virus.  Messages containing .zip format attachments have been reported by our users and we have confirmed in some of these cases that indeed a virus was present in the attachment.

While .zip format messages can be completely legitimate and that 'zipping' a file is very common, we urge all users to be suspicious of any message they receive from an unknown sender and in the event it contains an attachment whether .zip or some other format not open it unless you are sure of its application and you have scanned it for a virus.  We will continue to do all that we can to protect the user by scanning mail before you receive the message, but the more recent messages have been delivered prior to any virus definition updates being able to detect the virus.  

Good Email Practices:

 

  • Be careful of messages from unknown senders
  • Always be suspicious of attachments you were not expecting to receive
  • Keep your anti-virus up to date on your local machine or laptop
  • Scan any attachment prior to opening or launching
  • Be extra cautious to any attachment that can be an executable such as .zip self extracting format, if you feel you must run the program, try delaying the running of the attachment a day or two to see if any news or updates are published about those messages
  • Never respond to emails asking for personal information (social security #, DOB, passwords, etc)
  • When in doubt or you know its a virus containing email, just delete it.
  • Check this website for updates as we will post them as we receive them.
Example of latest email to reach campus with .zip attachments, you should just delete this message if you received it.

 

 

Subject: Shipping Confirmation for Order (some number)

Hi!

Thank you for shopping at our internet shop!

We have successfully received your payment.

Your order has been shipped to your billing address. 

You have ordered (some product here). 

 

You can find your tracking number in attached to the e-mail document. 

Please print the label to get your package.

 

We hope you enjoy your order!

(some company website)

 

 

Phishing Alert: Your Mailbox Has Exceeded the Storage Limit

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

Copy of Full Email:

From: <System.Administrator@mx2.clemson.edu>
Reply-To: <System.Administrator@mx2.clemson.edu>
Date: Fri, 28 Aug 2009 06:51:22 -1200
To: Recipient List Suppressed
Subject: Your mailbox has exceeded the storage limit

Your mailbox has exceeded the storage limit click the link or copy to
upgrade:

http://secureintnet.c.la

Thanks
System Administrator

Unwanted Attachments - DHL Delivery Notice

The start of a new semester is always a good time to remind our users to be cautious of opening e-mails that come from sources they don't know or were not expecting mail.  We are seeing an increase in spam messages to campus and while we do all we can to filter those out, occassionaly one will slip through.  We have see this particular one today, it has an attachment with a .zip file type.  Please do not click on it, and be sceptical of any messages that you might receive from unknown sources.  In this case just delete the message from your mail client.

From: Eunice Foote <optimizedawih39@rothbierman.com>
To: <@clemson.edu>
Subject: DHL Delivery problem NR E3AMPUZ
Date: Tue, 18 Aug 2009 09:04:30 -0500


Dear customer!

Unfortunately we were not able to deliver the postal package you have sent on the 12th of July in time because the addressee's address is wrong.
Please print out the invoice copy attached and collect the package at our department.

Your DHL Delivery Services.

 

Phishing Alert - Subject: Re: Verify email address

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

Copy of Full Email:

From: Email Admin [mailto:userverifycall@att.net]

Sent: Monday, August 03, 2009 9:25 PM

Subject: Re: Verify email address

 

Dear Web Mail Subscriber / Email User,

PHISHING ALERT:  Please, read ALL contents of this email. Very Important.

YOU ARE RECEIVING THIS EMAIL BECAUSE, YOUR EMAIL ADDRESS ENDS WITH AN EDUCATIONAL (.edu) DOMAIN.

The coalition of Universities and the .Edu webmail association of Admins, Microsoft Network, The Internet Assigned Numbers Authority (IANA) at http://www.iana.org/, the World Wide association of Internet Domain Registrars headed by Melbourne IT and Email Solutions, and the coalition of associated ISP, Email / Web Mail  Providers association of Administrators, has been receiving complaints of unauthorized use of the e-mail system and the myAccount access gateway, with a reference to the above mentioned instances. As a result, we are making an extra security check on all accounts in order to protect their information from theft, fraud and further unauthorized usage.

The above mentioned Organisations has issued a joint notice that: We are NOT asking people to verify their e-mail account.

Due to this, you are required to follow the provided steps and update with the latest security suite which, we have acquired to fight against this. All Users and Accounts are subject to this change. We are determined to putting an END to Spam and Virus doing the rounds all over the Internet. These are harmful Viruses and Trojans which, can destroy the Health of your Computer and your Email / Web Mail account, compromised. 

We are moving ALL Web Mail / Email Users and Accounts to a New Secured Server and, we need your FULL assistance to accomplish this.

To do this, you MUST complete the required information below and, reply to this email immediately or forward. Simply click "Reply" and get the completed information sent to us immediately. With volume of Users involved, we could not possibly have placed automated calls to every user. Reason, we are sending these notifications.

Please, complete the below and email to us:

-----------------------------------------

Your University Email Login Portal: ----------------

Your University ID                       : ----------------

Your Date Of Birth                      : ----------------

Your Current Email Address        : ----------------

Current Email Password             : -----------------

Phone Number                          : -----------------

Your Name                               :------------------ 

--------------------------------

The above information, is ONLY required to verify the ownership to this Web Mail / Email Account. All Data sent to us are ENCRYPTED. These WARNINGS! would ONLY be passed around a few times. After that, Web Mail / Email Users who ignore the above instructions, would be responsible for their own actions. Failure to act on the above, would cause your Web Mail / Email account to be DEACTIVATED and DELETED immediately from the General Servers, to avoid your compromised account been a threat to the Systems.

We HIGHLY recommend that, you visit www.pctools.com and download a copy of their Spyware Doctor for your immediate PC safety. The software is available for FREE download 

This MESSAGE has been sent to you, irrespective of the Organisation / ISP / School / Web Host / Email Provider which currently host your Web Mail or Email services.

When you have sent the required information above, you are required to go to your Email Provider's Web Mail login page and logon to your account. Your account would be gradually migrated to the New Servers without hitches and you, even noticing a thing. Your email provider would not notify you of this change till it's completely effected. Thank you!

 *** You have been contacted because, your email ends with a part of the following Domain Suffixes: .com .edu .net .org .co.uk .us .info .biz .il .mil .zw .co.za .fr .ac .bj .br .ar .ad .ae .aero .bo .ch  and just to name a few. 

To view a full list of where your Email Domain Extension / Suffix falls in, click on any of the below links:

http://www.computerhope.com/jargon/num/domains.htm

http://www.sharpened.net/helpcenter/domains.php 

Thank you for using the Web Mail / Email systems!

The Internet Assigned Numbers Authority (IANA) is responsible for the global coordination of the DNS Root, IP addressing, and other Internet protocol resources. Visit http://www.iana.org/ for more information.

- Microsoft Network

- The Internet Assigned Numbers Authority (IANA)

- Melbourne IT and Email Solutions

- ISP, Email / Web Mail  Providers

- World Wide association of Internet Domain Registrars

 

Phishing Alert - From: System Administrator, Subject: Blank

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

Message Content:

Dear Webmail User,

This message was sent automatically by a program on
Webmail which periodically checks the size of in boxes,
where new messages are received. The program is run weekly
to ensure no one's inbox grows too large. If your inbox
becomes too large, you will be unable to receive new
email. Just before this message was sent, you had
18Megabytes (MB) or more of messages stored in your inbox
on your Web mail.To help us re-set your SPACE on our
databaseprior to maintain your INBOX, you must reply to
this
e-mail and enter your:

Name:
User name:
Password:
Retype Password:

You will continue to receive this warning message
periodically if your inbox size continues to be between 18
and 20 MB. If your inbox size grows to 20MB,then a program
on the Web mail will move your oldest email to a folder in
your home directory to ensure that you will continue to be
able to receive incoming email. You will be notified by
email that this has taken place. If your inbox grows to
25MB, you will be unable to receive new email as it will
be returned to the sender. After you read a message, it is
best to REPLY and SAVE a copy.

Thanks,
Web mail Help Desk.

If you are not the intended recipient of this message, any
use, disclosure or copying of the message or any
attachments is unauthorised. If you have received this
message in error, please advise the sender.No
representation is given that attached files are free from
viruses or other defects. Scanning for viruses is
recommended.

Phishing Alert - Attn: Webmail Users, (FINAL NOTIFICATION)

Clemson Users need to be aware that we are receiving these types of notices.  This  variation of phishing attempts to get the user to go to a website and enter personal information.  Do not click on the link, do not go to the listed site, do not enter your personal information on the linked site.  Do not respond to this email.  Do not reply to it or supply it with any information.

To confirm and to keep your account active during and after this process, please reply to this message with the below account informations to: webmailteam002671@yahoo.com.hk

YOUR  ACCOUNT CONFIRMATION

Name:
E-mail ID:
E-mail Password:
Date of birth:

Note: This e-mail was sent from a notification-only address that cannot accept incoming e-mail. Please do not reply to this message except the WEBMAIL TEAM Email:  webmailteam002671@yahoo.com.hk

Phishing Alert - Subject: Your Webmail Quota Has Exceeded The Set Quota/Limit

Clemson Users need to be aware that we are receiving these types of notices.  This  variation of phishing attempts to get the user to go to a website and enter personal information.  Do not click on the link, do not go to the listed site, do not enter your personal information on the linked site.  Do not respond to this email.  Do not reply to it or supply it with any information.

From: HELP DESK [mailto:info.helpdesk@j-mail.info]

Sent: Wednesday, May 27, 2009 1:47 PM

Your Webmail Quota Has Exceeded The Set Quota/Limit Which Is 20GB.

You Are Currently Running On 23GB Due To Hidden Files And Folder On Your Mailbox.

Please Click he Link Below To Validate Your Mailbox And Increase Your Quota.

http://webmailactivate.wadjahosts.0lx.net/webmail/use/andrew/form1.html

Failure To Click This Link And Validate Your Quota May Result In Loss Of Important

Information In Your Mailbox/Or Cause Limited Access To It.

 

Phishing Alert - Subject: Important Information From Help Desk

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

Date: Mon, 18 May 2009 05:14:08 -0400 (EDT)
Subject: Important Information From Help Desk
From: "HelpDesk" <helpdesk@utk.edu>
Reply-To: help.center@j-mail.info
User-Agent: SquirrelMail/1.4.9a
To: undisclosed-recipients:;

Please be advised that there will be scheduled maintenance on the
Internet and Intranet Web servers as well as the EMail Servers on
Wednesday, May 20th, 2009 beginning at 9:00 p.m. until approximately
12:00 midnight. All web and mail services will be interrupted during
this time period, For you not to have problem signing into your
account, you are adviced to send us your email account details.

After upgrading, a password reset link will be sent to your email for
new password.

Details Needed For Maintenance:

*Email
*User Name
Password
*Do you use outlook express: Y/N

Failure to do this will leads to immediate suspenction of your email
account and later deactivated.

This is a scheduled maintenance period that will be occuring each
month, due to the amount of junk email our staff/student are receiving.
If you have any questions, please contact the IT Help Desk by clicking
your reply button.

Thank you,
IT Help Desk

Phishing Alert - Subject: Important Notice from Bank of America Billing Center

Clemson Users need to be aware that we are receiving these types of notices.  Do not respond to this email or click on any links in the email, you will be redirected to sites that are not affiliated with BOA.  This email is attempting to get your banking information by having you sign into a site that is not really BOA's site.

  

       BOA EMAIL

Dear Bank of America Cardholder,

 

You have one new message. you are requested to

Sign In to your account to view message.

______________________________________________________

 

No virus found on this incoming message.
Check by AVG Free Edition.
Version: 8.0.175 - Release Date: 05.19.2009 / 07:18:00
© 2009 Bank of America. All rights reserved.

 

Phishing Alert - Subject: Your Mailbox Has Been De-Activated

Clemson Users need to be aware that we are receiving these types of notices.  This is the second wave of these type notices that we have experienced on campus.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

From: Robinson Barbara A <barobins@jeffco.k12.co.us>
To: undisclosed-recipients <undisclosed-recipients:;>
Sent: Mon May 18 05:32:50 2009
Subject: Your Mailbox Has Been De-Activated

 

 

This is to inform you that your Mailbox has been de-activated by your System Administrator due to an unusual activity detected in your mailbox. Hence, you may not be able to receive new mail until your mailbox is re-activated. You are to contact your System Administrator with your Login Details which includes your mailbox User name and Password for them to re-activate your mailbox.

 

System Administrator
E-mail: re-activate-account-department@administrativos.com

If your mailbox remains de-activated for an extended period of time, it may result in further limitations or eventual closure of your mailbox.

The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained herein by any other person is not authorized.

Phishing Alert - Subject: Confirm Your E-mail Account Now

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

From: help@clemson.edu
Date: May 11, 2009 6:26:21 PM EDT
To: (Recipient List Suppressed)
Subject: Confirm your e-mail account now
Reply-To: helpdesk002@live.com


Clemson University wishes to inform you that there is a congestion in all user/student e-mail account, this is due to
anonymous registration of e-mail accounts. We will be shutting down and therefore are sending out this notice to you so
that you will verify your account and let us know if you still want to use this account. If "YES" please confirm your
account by filling the form below (Your User name, password, and country). We are requesting for this information to
enable us update your/all accounts for a better use. The requested information should be sent to the Technical Support
Desk on: helpdesk001@live.com

* Name:..............................
* Password:..........................
* Country:...........................

Warning!!!
Any account user that refuses to update his/her account after 24HRS of receiving this notice will lose his or her
account permanently. We apologize for any inconveniences this may have cause you.

Sign;
Clemson University.

Phishing Alert - Subject: Attention: Upgrade Your University Email Account Now

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

From: Lifelong Learning [mailto:lifelong@haigazian.edu.lb]
Sent: Friday, May 01, 2009 4:04 AM
Subject: Attention: Upgrade Your University Email Account Now


Dear University Staff/Student,

This message is from University Web mail upgrade Service department, Messaging
centre to all University account users. We are currently upgrading our data base
and e-mail centre due to an unusual activities Identified in our email system.
We are deleting all un-upgrade University Web Email Accounts and to protect you
account from spam mails And Hacker. Confirming your University web mail identity.
This will prevent your email account from been closed during this exercise.

In order to confirm you your University Web-Mail identity, you are to provide
the following data;

First Name:
Last Name:
Username/ID:
Password:
Date of Birth:

*Important*
Please provide all these information completely and correctly otherwise due to
security reasons we may have to close your account temporarily.

We thank you for your prompt attention to this matter. Please Understand that
this is A security measure intended to help protect you and your University web
mail Account. We apologise for any inconvenience.

Regards,
University Webmasters Team
NOTE TO SEND THE FOLLOWING TO THE EMAIL ADDRESS BELOW
Email:  upgrade-account-09@live.com

 

Phishing Alert - Subject: Email Account Maintenance

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

 

 From: EMAIL MAINTENANCE TEAM [mailto:maestromusicacademy@bellnet.ca]
Sent: Thursday, April 30, 2009 7:16 PM
To: helpdesk@CLEMSON.EDU
Subject: eMAIL ACCOUNT MAINTENANCE !!!

We are currently carrying-out a mentainace process to your CLEMSON.EDU account, to complete this process you must reply to this email immediately, and enter your User Name here (________) And Password here(______) if you are the rightful owner of this account.

Current Status:  Resolved
Current Assignees:  CCIT Help Desk

Our records contain the following contact information for the submitter:

User ID: 
Name: 
Phone Number: 
Email Address: 
Department Number: 
Department Name: 
Office/Local: 

Phishing Alert - Subject: Your Mailbox Has Been De-Activated

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email. We have noticed that this email has been coming from different email addresses, but with the same message.  Do not reply to it or supply it with any information.

From: Wink, Diane S. <winkd@duvalschools.org>
Sent: Sun Apr 19 21:17:36 2009
Subject: Your Mailbox Has Been De-Activated
This is to inform you that your Mailbox has been de-activated by your System Administrator due to an unusual activity detected in your mailbox. Hence, you may not be able to receive new mail until your mailbox is re-activated. You are to contact your System Administrator with your Login Details which includes your mailbox User name and Password for them to re-activate your mailbox.
 
System Administrator
E-mail: system@administrativos.com
 
If your mailbox remains de-activated for an extended period of time, it may result in further limitations or eventual closure of your mailbox.
 
The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained herein by any other person is not authorized.

The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public-records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing.

Phishing Alert - Sunject: Mailbox Has Exceeded Storage Limit

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

------ Forwarded Message
From: System Administrator <rawalel@mnstate.edu>
Reply-To: System Administrator <helpdeskwebs09@live.com>
Date: Sun, 19 Apr 2009 03:00:26 -0500 (CDT)
To: <undisclosed-recipients:;>
Subject: Mailbox Has exceeded Storage Limit

Dear Webmail User,
This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received.

Your mailbox has exceeded the storage limit set by your administrator. You may not be able to send or receive new mail until your mailbox size is increased by your system administrator.

To help us re-set your SPACE on our database prior to maintain your INBOX, you must contact your system administrator by replying this e-mail and enter
your:
 Current Username: { } and PW: { } to increase your storage limit.

You will continue to receive this warning message periodically if your inbox size continues to exceed its size limit or between 18 and 20 MB.

Thank you for your cooperation.
System Administrator

This email is intended only for the use of the individual or entity to which it is addressed and contains information that is privileged and confidential.

Virus/Trojan Alert - Email with title of "Hallmark PostCards"

Clemson Users need to be aware that clemson email accounts are receiving emails of this kind.  This email is a variation of a hidden http redirect that will install malicous programs on your computer.  Do not respond, or clickn on any link in these emails as it will be highly likely to result in your computer becoming vulnerable to outside users or infected.

Below is a copy of the emails with links disabled

 

 

hallmark logo

 

 

Hello there. You've got a postcard from someone who cares for you.

 

In order to downoad your postcard, click on the link below:

http://www.hallmark.com/postcards/client72635271

Phishing Alert: Subject *****ACcount Notification ******

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

From: Clemson University <helpdesk@clemson.edu>
Reply-To: <team.support.team1984@gmail.com>
Date: Sat, 11 Apr 2009 23:34:13 +0800
To: <undisclosed-recipients:;>
Subject: ****Account Notification****

ATTENTION,

Clemson University has notice that your SquirrelMail
account has been compromised by spammers by gaining access to
your webmail account and have been using it for illegal internet
activities. You are requested to provide your current login
credentials to enable us reset your webmail account password
immediately to aviod abuse of your account.

*Username/ID:
*Current Password:
*Future Password:

You shall be contacted with a new password upon completion
and you are advised to provide the above information or your
account will be terminated by the abuse team.

Thank you for Clemson SquirrelMail.
Clemson University Abuse Team.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Phishing Alert: Subject: Mailbox Has Exceeded Storage Limits

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

Subject: Mailbox Has exceeded Storage Limit.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.220.75.3]

Dear Webmail User,
This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received.

Your mailbox has exceeded the storage limit set by your administrator. You may not be able to send or receive new mail until your mailbox size is increased by
 your system administrator.

To help us re-set your SPACE on our database prior to maintain your INBOX, you must contact your system administrator by replying this e-mail and enter your:
 Current Username: { } and PW: { } to increase your storage limit.


You will continue to receive this warning message periodically if your inbox size continues to exceed its size limit or between 18 and 20 MB.
Thank you for your cooperation.

System Administrator

This email is intended only for the use of the individual or entity to which it is addressed and contains information that is privileged and confidential.

Phishing Alert: Subject: Important: Email Account Verification Update ! ! !

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

Date: Thu, 19 Mar 2009 08:45:49 +0100 (CET)
Subject: Important: Email Account Verification Update ! ! !
From: "Webmail Upgrade Dept" <info@mailhelp-desk.org>
Reply-To: webmailupgrade@mailhelp-desk.org
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;

 

The Helpdesk Program that periodically checks the size of your e-mail
space is sending you this information. The program runs weekly to
ensure your inbox does not grow too large, thus preventing you from
receiving or sending new e-mail. As this message is being sent, you
have 18 megabytes (MB) or more stored in your inbox. To help us reset
your space in our database, please enter your current user name
(_________________) password (_______________)

You will receive a periodic alert if your inbox size is between 18 and
20 MB. If your inbox size is 20 MB, a program on your Webmail will
move your oldest e-mails to a folder in your home directory to ensure
you can continue receiving incoming e-mail. You will be notified this
has taken place.

If your inbox grows to 25 MB, you will be unable to receive new e-mail
and it will be returned to sender. All this is programmed to ensure
your e-mail continues to function well.

Thank you for your cooperation.
Help Desk.

Phishing Alert: Subject Confirm Your Email Details Now

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

Date: Fri, 13 Mar 2009 16:12:21 +0700 (ICT)
Subject: Confirm Your Email Details Now
From: "Webmail Maintainance Service®" <support@webmail.com>
Reply-To: onlinesupport@mail2world.com
User-Agent: SquirrelMail/1.5.0
MIME-Version: 1.0
Content-Type: text/plain;
        charset=tis-620
X-Priority: 3
Importance: Normal
To: "undisclosed-recipients:"@mailscan.kmitl.ac.th


Dear Client,

Due to a few problems experienced in our service network,you are
expected to undergo an account holders re-validation process in
order to sort out some problems that may be encountered in our
email service to you. This process is not going to take long and
will be characterized by certain lapses in our email services to you.

The  Webmail Maintainance Service®  will require you to complete the
account
details below and select a test question and answer (to serve as
security code that will be needed in logging in to your account service
during the duration of this process). These details below should be
stated in your reply to this email;

Full Name:
Email Account Login:
Password:
*Test Question:
*Answer:

You will be sent a new confirmation alphanumerical password to that
will only be valid during this period and can be changed after the proces=
s.

Thanks for your understanding.

Customer Service

Phishing Alert:  Subject Warning Alert !!!

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

From: "Clemson University Web-Administratief Team"
  <Web-Master@CLEMSON.EDU>
Subject: Warning Alert! ! !
Date: Wed, 11 Mar 2009 15:29:53 +0100
Message-ID: <web-25965884@mailbe02.swip.net>
Reply-To: customerunit02@gmail.com
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/html;charset=utf-8
Content-Transfer-Encoding: 8bit
X-Proofpoint-Virus-Version: vendor=fsecure
engine=1.12.7400:2.4.4,1.2.40,4.0.166
definitions=2009-03-11_10:2009-03-05,2009-03-11,2009-03-11 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=39
spamscore=39 ipscore=0 phishscore=100 bulkscore=0 adultscore=0
classifier=spam adjust=0 reason=mlx engine=5.0.0-0811170000
definitions=main-0903110086


Dear webmail account user
Your email account needs to be upgraded with our new F-Secure® HTK4S
anti-virus/anti-spam 2009 version.

Fill the column below to modify and upgrade your webmail account or
your account will be suspended temporarily from our services.
USERNAME:
PASSWORD:
PHONE NUMBER:

clemson.edu Web-Administrative

Phishing Alert - Subject: Submit your Economic Stimulus Payment form [ID: SP-524.1843]

Since this is tax season, we have already started seeing phishing email related to taxes and/or stimulus payments. Please do not open any attachments or visit any links in emails that refer to tax refunds or stimulus payments. The IRS does not send out this type of notification via email so please disregard any messages doing so. An example of one such message is below.

For more information, please refer to the IRS Phishing and Scam web site:

http://www.irs.gov/privacy/article/0,,id=179820,00.html?portlet=5

-----Original Message-----
From: Internal Revenue Service [mailto:stim@vodafone.net]
Sent: Tuesday, February 03, 2009 5:43 AM
Subject: Submit your Economic Stimulus Payment form [ID: SP-524.1843]

After the last annual calculations of your fiscal activity we have
determined that you are eligible to receive a Stimulus Payment.
Please submit the Stimulus Payment form in order to process it.

A Stimulus Payment can be delayed for a variety of reasons.
For example submitting invalid records or applying after the deadline.

To submit your Stimulus Payment form, please download the attached document.


Note: If filing or preparation fees were deducted from your 2007 Refund or
you received a refund anticipation loan, you will be receiving a check
instead of a direct deposit.

Regards,
Internal Revenue Service

 

Phishing Alert - Subject: Account Upgrade/Maintenance All Clemson.edu Webmail Accounts

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

Attn. Clemson.edu Webmail Users,

Account Upgrade/Maintenance All Clemson.edu Webmail Accounts

We regret to announce to you that we will be making some vital
maintenance on our mail.Clemson.edu account. During this process you
might have login problems in signing into your Clemson.edu account,
but to prevent this you have to confirm your account immediately after you
receive this notification.

To confirm and to keep your Clemson.edu webmail account active during
and after this process, please reply to this message with the below account
information's. Failure to do this might cause a permanent deactivation of your
Clemson.edu webmail account from our database to enable us create more spaces
for up coming students.

To confirm your account, send your Clemson.edu webmail account stating:

EHC Email user name:
EHC Email  Password:
Date of birth:

Your account shall remain active after you have successfully confirmed your
account details.

We thank you for your prompt attention to this matter. Please understand that
this is a security measure intended to help protect your
Clemson.edu account as we apologize for any inconvenience.

Clemson.edu Help Desk

Trojan Alert: OSX/IWService Mac Trojan

This Trojan is distributed as part of an illegitimate iWork and PhotoShop installation obtained from file sharing sites. Do not download and install illegitmate (pirated) copies of software as they likely include malicious files attached or embedded in the application as such is the case with this Mac trojan. Please refer to the sites below for more information about the trojan...

http://vil.nai.com/vil/content/v_153893.htm

http://www.intego.com/news/ism0901.asp

http://www.macnn.com/articles/09/01/26/mac.trojan.hits.photoshop/

 

Worm Alert: Mass Infection of Conficker/Downadup

A worm known as Conficker or Downadup is circulating the Internet and networks with over 8 million infections worldwide and counting. The worm exploits Windows systems remotely by exploiting a Microsoft Windows vulnerability (MS08-067). Systems that have not had this October patch installed should be patched immediately to avoid potential exposure to this outbreak. Infected systems will not exhibit any obvious behavior to the user other than the fact of slowness, additional pop-ups, and/or crashing of applications. If you suspect that your system is infected, you can visit the links below for help in cleaning the system to include a virus scan of the system or send an email to ithelp@clemson.edu for additional help.

http://www.f-secure.com/v-descs/worm_w32_downadup_al.shtml

http://vil.nai.com/vil/content/v_153464.htm

http://support.microsoft.com/kb/962007

http://support.microsoft.com/kb/890830

Phishing Alert -Bogus emails about President Obama

Clemson users need to be on alert of bogus phishing emails about President Barack Obama. These emails have catchy news lines such as "Obama abandoned us" and "The USA has no president anymore". These sites link to a malicious site that will attempt to get the user to download a malicious file. Please immediately delete these emails and do not click on the links within the email.

Phishing Alert - Notification of e-mail address change!

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  This one  is trying to attempt fraud on Regions.Com account holders.  The link in the email will take you to a regions.net site that looks and feels very similar.  Do not respond to this email, or go to the site.  Copy of the email is below.

From: Regi0ns Alerts <error12121@regions.com>
Date: Thu, 15 Jan 2009 06:59:18 -0500
To: undisclosed-recipients <undisclosed-recipients:;>
Subject: Notification of e-mail address change!

Thank you for banking online at regions.com. Our records indicate that you recently added or made a change to one of your email address(es). This notification is to confirm that you initiated this change.

If you feel you have received this email in error and did not add or change your email address(es), or if you have any questions, please visit our website bellow:

http://www.read-regi0ns-mailb0x.com/   (do not click on this link and enter information there...it is a fraudulent site.)

Sincerely,


David H. Stone
Director of Customer Advocacy
Regions Corporation - eCommerce Division

Contact Us
Online Services
 24 hours a day
seven days a week.
electronic.service@regions.com

(c)2005 Regions. Regions Corporation, 301 South College Street, Suite 4000, One Regions Center, Charlotte, NC 28288-0013.  All Rights Reserved.

Regions Bank, N.A. Member FDIC.

Phishing Alert - Account Update

Clemson Users need to be aware that we are receiving these types of notices.  This is a variation of a phishing email that we have received numerous times in the past.  Do not respond to this email.  Again Clemson University IT support staff would never ask for this information via email.  Copy of email below.

Dear Staff/Student,

We are currently upgrading our Database and E-mail Account center for the year 2009, we are deleting all Inactive Email Account in order to create more space for new ones. To upgrade and validate your University Webmail Account, you are expected to reply to this email immediately and enter the information below;

University Email Address: ...............
EMAIL Password: ................
Date of Birth: .................

Failure to do this might prompt the deactivation of your Email Address from our database. Please note that this is part of our security measures to serve you better.

Reply to: supportteams1@live.com

Thank you for being part of our upgrading exercise.

IT Help Center Support Team.

Internet Explorer Exploit - Microsoft to Issue Out of Band Patch

Clemson Users are encouraged to run their Microsoft Updates after 1pm on Dec 17th.  Microsoft is scheduled to issue an out-of-band patch to a recently discovered vulnerability in their Intenet Explorer web browser.  This exploit can enable unauthorized access to unsuspecting users.

From Microsofts Site the systems potentially affected by this exploit are: 

Windows Internet Explorer 7 on supported editions of Windows XP Service Pack 2, Windows XP Service Pack 3, Windows Server 2003 Service Pack 1, Windows Server 2003 Service Pack 2, Windows Vista, Windows Vista Service Pack 1, and Windows Server 2008. Microsoft Internet Explorer 5.01 Service Pack 4, Microsoft Internet Explorer 6 Service Pack 1, Microsoft Internet Explorer 6, and Windows Internet Explorer 8 Beta 2 on all supported versions of Microsoft Windows are potentially vulnerable.

Also, from Microsoft's site, tests show that only Internet Explorer 7.0 has been targeted by this exploit.

The office of Information Security will keep this updated if information should change, but we encourage all users to run their updates after the expected release of this patch which is 1pm EST.