Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia. For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.
Regarding Suspicious Email Alerts
Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.
- If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
- Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
- If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us by forwarding it to abuse@virginia.edu.
Security Alerts and Suspicious Items Currently Affecting UVA:
[Posted: Jul 2, 2019 12:55 PM]
From: VIRGINIA WEBMASTER <enquiry[at]office3696.com>
Date: Tuesday, July 2, 2019 at 12:50 PM
Subject: Important Update
Dear user,
You have an update from Virginia Webmaster Click here<hxxp://mailckdm.com/central/authorization/server/> to read.
Virginia Webmaster
[Posted: Jul 2, 2019 12:09 PM]
From: Adam Rabinowitz <Rabinowitz[at]collaborativecommunications.com>
Date: Tuesday, July 2, 2019 at 8:06 AM
Subject: Completed: Please DocuSign:
[DocuSign]
[hxxps://ci4.googleusercontent.com/proxy/9xektQNkwEuTRONe7b9u3kdLdfXsIcgtgb5Dj_qf42xPJPz1ytwIcZFpVpCvTeirLDwYosjXB6w7o7FUKAs5_GWSMRkncp6bk5po1isJ43-fIGWNIDZ1oGXI3jMadePZ1V7_NtcIWHuCY9FSw7-8_NlN5zCxcq2ljbj_3SKjzS2wvXSP0_mkIQE6IPaL12qOCMUL79yPYq0zP_KQAwdOscKeSJwsrHlkXjzrbOGW2cOw__4i_YEZkrjwqMRrB09slHL6op4vmihBGC5pTdkOyFHJ3IX3zCvxIjzG0bTJL0K6Reny=s0-d-e1-ft#hxxps://ecp.yusercontent.com/mail?url=https%3A%2F%2Fwww.docusign.net%2Fmember%2FImages%2Femail%2FdocInvite-white.png&t=15373...
Adam Rabinowitz
sent you a document to review and sign.
REVIEW DOCUMENT<hxxps://storage.googleapis.com/adocusign-phloroglucinol-297314464/index.html>
Thank You.
Powered by
[DocuSign]
Adam Rabinowitz | Media and Strategy Project Manager
Collaborative Communications Group
office: (123) 456-7890 | cell: (123) 456-7809
www.collaborativecommunications.com<hxxp://www.collaborativecommunicatio...
Connect to me on LinkedIn<hxxp://www.linkedin.com/profile/view?id=29764430&trk=tab_pro>
[Posted: Jul 1, 2019 9:31 AM]
From: WeTransfer [mailto:noreply[at]wetransfers.us]
Sent: Monday, July 01, 2019 8:47 AM
To: User, Typical (kjh5e) <mst3k[at]virginia.edu>
Subject: mst3k[at]virginia.edu has received files via WeTransfer
Thanks for using WeTransfer! Your files were sent successfully.
[Click 'Download images' to view images]<hxxps://wetransfer.com/?utm_campaign=WT_email_tracking&utm_content=general&utm_medium=logo&utm_source=notify_sender_on_upload_success_email>
Files sent to
mst3k[at}virginia.edu<mailto:mst3k[at]virginia.edu>
1 file, 21.9 KB in total * Will be deleted on 8th, July 2019
Dear mst3k as discussed please amend export license as attached.
Recipients
mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Download link
hxxps://wetransfer.com/downloads/99780b693dd4ab542c0d55818312948320190305134717/2d25cc954c5b66f8606bc1c4e77b166620190305134717/ce41cd<hxxps://www-dvat-yrima.wangking.us/.%4040%4050%40.?email=jmst3k[at]virginia.edu>
1 file
EXPORT LICENSE.pdf
To make sure our emails arrive, please add noreply@wetransfer.com<mailto:noreply[at]wetransfer.com> to your contacts<hxxps://wetransfer.zendesk.com/hc/en-us/articles/204909429?utm_campaign=WT_email_tracking&utm_source=notify_sender_on_upload_success_email&utm_medium=Add+Us+To+Your+Contacts+Link&utm_content=general>.
Get more out of WeTransfer, get Plus
About WeTransfer * Help * Legal * Report this transfer as spam
[Posted: Jul 1, 2019 9:22 AM]
Subject: RETRIEVE MAILS:- virginia.edu Cloud stopped the delivery of 11 mails
Date: Sun, 30 Jun 2019 18:20:33 -0700
From: Support || virginia.edu <noreply11000@virginia.edu><mailto:noreply11000@virginia.edu>
To: mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
⚠ virginia.edu HAS PREVENTED THE DELIVERY OF 11 EMAILS
11 PENDING MAILS
Retrieve here<hxxps://refrigeratedvansdubai.com/sweep/floor?email=js4c@virginia.edu>
Settings | Help | Opt-out | Download app
virginia.edu, 90055 Plug Street, 900 U turn San, CA 94103<https://google.com/>
[Posted: Jun 30, 2019 5:33 AM]
From: Boye, Teeja <BoyeT19[at]darden.virginia.edu>
Date: Fri, Jun 28, 2019 at 3:29 PM
Subject: New Job Alert!!! (HR-Department)
To: mst3k[at]virginia.edu <mst3k[at]virginia.edu>
*Hello,*
*I am Boye Teeja** from DARDEN **UNIVERSITY OF VIRGINIA**. You have
received this email because you have an offer from the University Office to
work these summer for the HR-Department. You will be paid $300 Weekly! If
interested Kindly Click Here <hxxps://form.jotform.com/91783461244157> to
send your resume.*
*Thank You,*
*Boye Teeja*
*. *
[Posted: Jun 27, 2019 4:50 PM]
From: MyVirginia <grapetester[at]sympatico.ca>
Reply-To: MyVirginia <grapetester[at]sympatico.ca>
Date: Thursday, June 27, 2019 at 4:39 PM
Subject: University of Virginia
This message is brought to you by the University of Virginia Directory, Click on REVIEW<hxxp://tinyurl.com/yxk4n78r> to read now.
[Posted: Jun 27, 2019 10:37 AM]
Dear mst3k[at]law.virginia.edu
You have undelivered emails on the server. These emails have not been properly synced with your mailbox. To synchronize your mailbox with your host. click below
Download your emails <hxxp://23.249.163.15/retrieve_emailsob/?value=mst3k[at]law.virginia.edu>
However, if you do not retrieve your undelivered emails now, they may be lost for ever.
and all your email data will be lost permanently.
Email Server
________________________________
This message is auto-generated from E-mail security server. Do not reply to this message
(c)2019 All Rights Reserved.
[Posted: Jun 27, 2019 10:21 AM]
From: Don Cartier <forexloanorganization[at]gmail.com>
Sent: Wednesday, June 26, 2019 9:44 PM
Subject: Financial Service Funds
Fortress Capital Investment
Loan Order Department
This is from Capital Financial Loan Investment, we offer Personal Loan, Business Loans, Students Loan
with a very low interest rate and with or without collateral.
We are very solid and have the capacity to swift large amount of funds
across to local and abroad. If you are interested, reply back to commence
loan approval
Full Name: .................
Loan Amount: .................
Phone Number: .................
Country: ....................
We shall contact you with more details to complete your application
through email/phone
At Your Service,
Mr. Don Cartier
Loan Application Director
Capital Financial Loan Investment
[Posted: Jun 27, 2019 9:08 AM]
From: virginia.edu<hxxp://virginia.edu> <sales[at]forexnewsmart.info<mailto:sales[at]forexnewsmart.info>>
Subject: ✉ DEAR mst3k Messages Pending Delivery On Your e-Mail Portal
Date: June 26, 2019 at 3:11:11 PM EDT
To: mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Dear Mail User
You have Three (3) Messages Pending Delivery On Your e-Mail Portal Since: 14 June 2019.
This messages can be viewed by the subject of each message or proceed to sign in to Release Message on your e-Mail Account below.
User ID: mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Domain: virginia.edu<hxxp://virginia.edu>
Status Subject Recipient Date
Pending: RE: Statement Of Account Notice<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae> To: virginia.edu<hxxp://virginia.edu> 14-06-2019
Pending: Fw: Proforma Invoice/Contract<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae> To: virginia.edu<hxxp://virginia.edu> 17-06-2019
Pending: RE: Outstanding Payment: $87,500.00<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae> To: virginia.edu<hxxp://virginia.edu> 19-06-2019
Sign In And Verify<hxxp://waralabanyoklat.com/We_Transfer/MailboxFUD/MailboxFUD/MailboxFUD/home/index.php?email=mst3k[at]virginia.edu>
Sincerely
Web Admin (C) 2019 Secured Service.
eim.ae<hxxp://eim.ae/> • Web Admin • Redmond, WA 98052
You are receiving this one-time notification because you created mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu> account.
[Posted: Jun 27, 2019 8:57 AM]
From: Charles Schwab <proregion_cv07[at]proviasdes.gob.pe>
Sent: Wednesday, June 26, 2019 7:29 PM
To: Recipients <proregion_cv07[at]proviasdes.gob.pe>
Subject: Account Notice
Delayed contribution listed on your account requires urgent attention.
Please VERIFY NOW at IRA \ Verification portal<hxxps://online16.godaddysites.com/>.
[Posted: Jun 26, 2019 12:05 PM]
From: Typical User (mst3k) <mst3k [at] virginia.edu>
Sent: Wednesday, June 26, 2019 9:52 AM
Subject: Completed: Please DocuSign:
|
|