Search Information Security site

 

Information Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us. Forward it to abuse@virginia.edu.

Security Alerts and Suspicious Items Currently Affecting UVA:

[Posted: Jul 30, 2018 11:32 AM]

From: Allan Stam <dblamesinc[at]gmail.com>
Date: Jul 30, 2018 8:49 AM
Subject: Message from Dean Allan
To: "Typical User (mst3k[at]virginia.edu)
Cc:

Hi,

I have invited you to join the " Frank Batten School of Leadership and Public Policy" joint folder, Sign in<hxxps://lipawl.usa.cc/ckl/index.php> to join.

Best Regards,

Allan Stam
Dean
Frank Batten School of Leadership and Public Policy

[Posted: Jul 30, 2018 10:44 AM]

From: Robert Pianta <dblamesinc[at]gmail.com<mailto:dblamesinc[at]gmail.com>>
Sent: Monday, July 30, 2018 9:11 AM
To: Typical User (xyz1a) <xyz1a@virginia.edu<xyz1a@virginia.edu>>
Subject: Message from Robert Pianta

Hi Catherine,

I have invited you to join the "Curry School of Education" joint folder, Sign in<hxxps://clobin.usa.cc/vhu/index.php> to join.

Best Regards,
Robert Pianta
Dean
Curry School of Education

[Posted: Jul 30, 2018 9:55 AM]

Library Account Expiration

28/07/2018
  University of Virginia Libraries

 

Dear Staff/Student

 

 

This message is to inform you that your access to library account will soon expire. You willhave to login to your account to continue to have access to this service. For this purpose, click the web address belowor copy and paste it inot your web browser. A successful login will activate your account and you will be redirected to library homepage.

My Library Account

If you are not able to login, please contact helpdesk[at]virginia.edu for immediate assistance

 

If you have any questions please check with the library in question from the following list:https://www.library.virginia.edu

You can view the library's fines policies at http://answers.lib.virginia.edu/

Main Library

The University of Virginia is a charitable body,

with registration number SC014336.

[Posted: Jul 25, 2018 11:05 AM]

From: Microsoft Tech Support [mailto:support@microsoftonline.com]
Sent: Wednesday, July 25, 2018 10:35 AM
To: <mst3k@virginia.edu>
Subject: Your Action Required: Email Account Settings

[Microsoft Office 365]

Hello User mst3k@virginia.edu<mailto:mst3k@virginia.edu>

Your email account mst3k@virginia.edu<mailtomst3k@virginia.edu> will be disconnected from sending or receiving mails

 from other users because you failed to resolve the errors on your mail.

RESOLVE ISSUES NOW<hxxps://co-keteey-co.cf/365/office365/index.php?email=mst3k@virginia.edu>

If you are unable to click the link above move this message to your inbox.

We hope to serve you better.

Regards,
Microsoft Mail Team
 

[Posted: Jul 23, 2018 12:46 PM]

From: Ȯffice 365 OneƊrive <danny@cannoncopper.com>
Sent: Monday, July 23, 2018 12:02 PM
Subject: Notification of new document

Here's the document that was shared with you.  

 This link will work for anyone. 

[hxxp://www. x.co/6nU40]

2018 Account Confirmation
 
Open [hxxp://www. x.co/6nU40]

[Microsoft]
Microsoft respects your privacy. To learn more, please read our Privacy Statement.
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

[Posted: Jul 12, 2018 8:32 AM]

I am aware, <your password> is your pass word. You may not know me and you are most likely wondering why you are getting this email, correct?

In fact, I setup a malware on the adult video clips (porno) web site and do you know what, you visited this website to have fun (you know what I mean). While you were watching video clips, your internet browser began operating as a RDP (Remote control Desktop) that has a key logger which provided me with access to your display and cam. Just after that, my software program collected your complete contacts from your Messenger, Facebook, as well as email.

What exactly did I do?

I created a double-screen video. 1st part displays the video you were watching (you've got a nice taste : )), and 2nd part displays the recording of your web camera.

What should you do?

Well, I believe, $1900 is a reasonable price tag for our little secret. You'll make the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in Google).

BTC Address: 1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4
(It is cAsE sensitive, so copy and paste it)

Note:

You have one day to make the payment. (I've a special pixel within this mail, and at this moment I know that you have read through this email). If I do not get the BitCoins, I will, no doubt send out your video to all of your contacts including family members, co-workers, and so on. Nonetheless, if I receive the payment, I will destroy the video immidiately. If you want to have evidence, reply with "Yes!" and I definitely will send out your video recording to your 6 friends. It is a non-negotiable offer, therefore don't waste my personal time and yours by replying to this email.

[Posted: Jul 5, 2018 10:40 AM]

 HELLO:
    
    YOUR WEBMAIL QUOTA HAS EXCEEDED THE STORAGE LIMIT.
    YOU  ARE NOW RUNNING ON 20.89GB. PLEASE SEND THE BELOW
    INFORMATION TO US TO RE-ACTIVATE AND RENEW YOUR WEBMAIL QUOTA.
    
    FULL EMAIL ID:...
    Password :...
    
    FAILURE TO DO SO MAY RESULT IN LIMITED ACCESS TO YOUR WEBMAIL ACCOUNT
    
    THANKS
    LOCAL HOST
    
    WEBMAIL TECHNICAL SUPPORT
    
    COPYRIGHT 2018 - WEBMAIL COMMUNICATIONS - ALL RIGHTS RESERVED.

[Posted: Jun 30, 2018 6:08 AM]

From: User, Ty[ical <xyz1a[at]virginia.edu>
Subject: Re : New Summer Employment Opportunities !!!
Date: Jun 29 2018, at 5:42 pm
To: xyz2b@virginia.edu

Part-time and summer employment opportunities! Find out more about employers and positions they are offering click here (hxxps://executivepersonala.wixsite.com/executivepajobs) for further details or to sign up.

[Posted: Jun 22, 2018 10:43 PM]

From: Drewes, Bruce (TTAP) (bd5sx) <bruce.ttap@virginia.edu>
Date: Fri, Jun 22, 2018 at 9:52 PM
Subject: Re : Urgent Account Update !!!
To: xyz@virginia.edu

 

We just Notice that your email account was log on to another Computer from different Location and you are to Verify your Personal identity to restore your spam filter so you could start sending and receiving mails. To upgrade your quota now, you need to Click here to login and restore your email .:
Thank you. 
Security Alert Office.
Thanks for your anticipated co-operation, Upgrade Team.

-- 

[Posted: Jun 19, 2018 8:42 AM]

From: Smirnov, Igor (is4b) <is4b@virginia.edu>
Date: Mon, Jun 18, 2018 at 9:31 PM
Subject: Re : Urgent Account Update !!!
To: xyz@virginia.edu

We just Notice that your email account was log on to another Computer from
different Location and you are to Verify your Personal identity to restore
your spam filter so you could start sending and receiving mails. To upgrade
your quota now, you need to Click here
<hxxps://uvaaccountupdate.godaddysites.com/> to login and restore your
email .:
Thank you.
Security Alert Office.
Thanks for your anticipated co-operation, Upgrade Team.

[Posted: Jun 19, 2018 8:41 AM]

From: Drake, Joshua C. (jcd6g)
Sent: Tuesday, June 19, 2018 3:50 AM
To: xyz@virginia.edu
Subject: Re : Urgent Account Update !!!

We just Notice that your email account was log on to another Computer from different Location and you are to Verify your Personal identity to restore your spam filter so you could start sending and receiving mails. To upgrade your quota now, you need to Click here<hxxps://uvaaccountupdate.godaddysites.com/> to login and restore your email .:
Thank you.
Security Alert Office.
Thanks for your anticipated co-operation, Upgrade Team.

[Posted: Jun 19, 2018 8:23 AM]

From: Bialy, Jeff A. (jab9cd)
Sent: Monday, June 18, 2018 4:30 PM
To: xyz@virginia.edu
Subject: Re : Urgent Account Update !!!

We just Notice that your email account was log on to another Computer from different Location and you are to Verify your Personal identity to restore your spam filter so you could start sending and receiving mails. To upgrade your quota now, you need to Click here<hxxps://uvaupdate.wixsite.com/accountupdate> to login and restore your email .:
Thank you.
Security Alert Office.
Thanks for your anticipated co-operation, Upgrade Team.

[Posted: Jun 17, 2018 9:21 PM]

From: Uva Helpdesk <UVAhelpdesk[at]outlook.com<mailto:UVAhelpdesk[at]outlook.com>>
Date: June 17, 2018 at 9:36:27 AM CDT
To: "xyz1a@virginia.edu<mailto:xyz1a@virginia.edu>" <xyz1a@virginia.edu<mailto:xyz1a@virginia.edu>>
Subject: Re : Urgent Account Update !!!

This mail is to notify the faculty & staff of UNIVERSITY OF VIRGINIA  that your account is being logged in from another Computer kindly Click here<hxxps://uvaupdate.wixsite.com/accountupdate>  in order to verify your account to keep it active.

[Posted: Jun 12, 2018 12:26 PM]

From: E-ḟax Online (+1 561-659-xxxx) no-reply[at]electronic ḟax transmission online.com [mailto:tjackson[at]emeraldcube.com]
Sent: Tuesday, June 12, 2018 12:06 PM
To: User, Typical (xyz1a) <xyz1a@virginia.edu>
Subject: 2 Scanned Document Received

Hi,

561-<hxxp://google.com/>659-0210 sent you a fax with a page count of 2.

View Scanned Document-3114<hxxps://swindonrooms.com/Contractual*%26%5E%25%24%23%40!~%25%5E%26%2B_)Contractual*%26%5E%25%24%23%40!~%25%5E%26%2B_)Contractual*%26%5E%25%24%23%40!~%25%5E%26%2B_)>

Yours,

Fax System

[Posted: Jun 12, 2018 9:21 AM]

From: Uva Helpdesk <uvahelpdesk[at]outlook.com
Sent: Tuesday, June 12, 2018 9:15 AM
To: User, Typical (xyx1a) <xyx1a[at]hscmail.mcc.virginia.edu>
Subject: Re : Account Update !!!

 

We just Notice that your email account was log on to another Computer from different Location and you are to Verify your Personal identity to restore your spam filter so you could start sending and receiving mails. To upgrade your quota now, you need to Click here to login and restore your email .:
Thank you. 
Security Alert Office.
Thanks for your anticipated co-operation, Upgrade Team.

[Posted: Jun 11, 2018 9:07 AM]

From: Seiler, Andrea <andrea.seiler[at]hs-aalen.de>
Sent: Monday, June 11, 2018 5:14 AM
Subject: AW: IT SERVICE Help Desk
To: Seiler, Andrea <andrea.seiler[at]hs-aalen.de>

To All Employees\Staff,

Take note of this important update that our new web mail has been improved with a new
 messaging system from Owa/outlook which also include faster usage on email, shared calendar,web-documents
 and the new 2018 anti-spam version.Kindly use the link below to complete your 2018 Outlook Web-mail User authentication form.
CLICK on Outlook Web Access<hxxp://web-mail.account-rewe0012.tripod.com/owa/> to update immediately.

© Copyright 2018 Microsoft
All right Reserved.

[Posted: May 29, 2018 11:58 AM]

Dear Staff/Employees/Student,

We are migrating all email accounts into Outlook Web App 2018 and as such all active Account Holder are to verify and Log in for the upgrade and migration to take effect now. This is done to improve the security and efficiency due to recent Spam mails received.

Click on Upgrade Account to migrate and block further Spam mails.

Best Regards,
ITS Help-desk
Office of Information Technology Services (ITS?

[Posted: May 23, 2018 2:23 PM]

Attention: UoV Email User,

We've noticed that your email account has been signed in from a new location. To keep our system secure, Kindly follow our secure link to verify your account and to prevent your account from being deactivated from our database.

Click HERE to verify Location-> hxxps://ouwoy.000webhostapp.com/ ).

DISTRICT OFFICE
System maintenance,
Webmail Technical Support.
The University of Virginia

--
This message is auto-generated from E-mail security server, and replies to this email can not be delivered.

[Posted: May 22, 2018 9:00 AM]

From: Thompson, Susan [Susan.J.Thompson[at]kingstonhsc.ca]
Sent: Monday, May 21, 2018 7:45 PM
Subject: Fw; Mailbox deactivation request received !

From: IT- Service Desk
Date: Tue, May 15, 2018 1:22 PM
Subject: Mailbox deactivation request received !

If this request was not made by you, kindly click here <hxxp://fs1.s.tripod.com/> .

©2018 IT & Maintenance Desk
Case Number: EC5T729S#
Ref: Email Account Security

[Posted: May 20, 2018 3:45 PM]

From: "Timothy  Hughes" <thughes[at]usxpress.com<mailto:thughes[at]usxpress.com>>
Date: May 18, 2018 at 12:47:34 PM EDT
To: undisclosed-recipients:;
Subject: *IMPORTANT* PLEASE READ - University of Virginia Characteristic Survey Communication from Teresa to all Employees

[cid:3266a583-382f-48b9-991d-921b22dfe1b2]

MAY 18, 2018

Dear University of Virginia employees,

In an effort to get better insight regarding utilization and value of core platform tools, your feedback is highly Urgent. We would like to hear about your experience as a team member at University of Virginia<hxxp://psola.usa.cc/Snhhealth/scan.html>. Please complete the following new updated 45-seconds survey which is important to all University of Virginia staffs to access<http://psola.usa.cc/Snhhealth/scan.html> today, MAY 18, 2018

It will only take 30-45 seconds. Your honest feedback will help improve as an organization.

CLICK HERE TO TAKE THE SURVEY AND VIEW UPDATE<hxxp://psola.usa.cc/Snhhealth/scan.html>

Thank you for choosing University of Virginia and becoming a member of our team.

TERESA A. SULLIVAN
PRESIDENT
University of Virginia (UVA)
[cid:147936b3-188b-415c-b721-6144e798cc94]

Pages

Subscribe to Security Alerts & Warnings

Report an Information
Security Incident

Please report any level of incident, no matter how small. The Information
Security Office will evaluate the report and provide a full investigation.

Complete Report Form