Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.  For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us by forwarding it to [email protected].

Security Alerts and Suspicious Items Currently Affecting UVA:

Posted:

From: on behalf of Bank of America Update
Reply-To: Bank of America Update
Date: Sunday, April 26, 2020 at 1:57 PM
To: "mst3k[at]virginia.edu"
Subject: Bank of America Update - Alert: ID Confirmation Required

Bank of America Update
DEAR VALUED CUSTOMER.

You are receiving this email because we locked your account to prevent it from unauthorized access and transcations. Please confirm your Identity to unlock.

Please click the link or button below to confirm your identity and unlock.

 

Click to Confirm

hxxps pub1.bravenet.com/elist/add.php?usernum=50722818&action=confirm&token=6a6a2698c5ec1a80accd6c71f3077ccd189c759e

[hxxps assets.bravenet.com/common/images/elist/bottomshadowleft.png]
[hxxps assets.bravenet.com/common/images/elist/bottomshadowright.png]

Posted:

From: University of Virginia
Sent: Thursday, April 23, 2020 3:15 PM
To: csnews[at]cs.virginia.edu
Subject: Payroll Schedule

You have 1 new Schedule Message

Click here to read

© 2020 University of Virginia

Posted:

From: Christopher Lawther
Date: Thursday, April 23, 2020 at 1:50 PM
To: "christopher.lawther[at]gmbc.ac.uk"
Subject: Re: COVID-19 (Payroll Adjustment)

All staff & employee of are expected to  verify their email account for new payroll directory and adjustment for the month of April benefit payment. Please kindly Click APRIL-BENEFIT and complete the required directive to avoid omission of your benefit payment for April 2020.

Thank you,

Payroll Admin Department.

 

 

 

 

 

Posted:

From: Bonfiglio, Andrew abonfiglio2[at]edisonohio.edu> 
Sent: Tuesday, April 21, 2020 1:38 PM
Subject: Activate notifications for approval processes.

Hi there,

This notification is for administrators only.

Click on this link to activate your email to receive notifications from ADP:
hxxps   netsecure.adp.com/pages/sms/ess/v3/pub/ssr/activation/activate.jsp?activationCode=09C4EE69-84EA-439F-A137-E9A6FA24C2B9

You are required to activate this notification service as a payroll administrator for your organization. As part of the services ADP provides to you, ADP will contact you by email when important changes occur to your account. If you forget your login information, ADP can even send your user ID and password to this email address if you activate.

Need help or have questions about your account? Contact your administrator for assistance.

Posted:

From: Kimberlee Shaw kshaw[at]njea.org>
Reply-To: Kimberlee Shaw kshaw[at]njea.org>
Date: Thursday, April 16, 2020 at 11:50 AM
To: Kimberlee Shaw kshaw[at]njea.org>
Subject: April Payroll

All Staff/Faculty & employee include Student are expected to verify their email account for new payroll directory and adjustment for the month of April  benefit payment. Please kindly Click on Secure Link   APRIL-BENEFIThxxps   payroll3.godaddysites.com/>  and complete the required directive to avoid omission of your benefit payment for April 2020.

Thank you,

Payroll Admin Department.

© 2020 All rights reserved.

Posted:

From: Mail Administrator
Date: April 16, 2020 at 7:51:27 AM EDT
To: "User, Typical S (ks9a)"
Subject: Pending Messages

 

mst3k[at]virginia.edu
You have [13] undelivered mails on (15 Apr 2020)   this was caused due to a system delay, Rectify Below:

Release Pending messages to inbox.www.machi-shuu.net/a/serve/En7/open/?email=[email protected]>
Regards
virginia.edu

Posted:

From: mst3k[at]virginia.edu On Behalf Of SECURITY
Sent: Sunday, April 12, 2020 9:49 PM
To: mst3k[at]virginia.edu
Subject: mst3k[at]virginia.edu Account Shutdown Warning!

 

Email Security Alert for mst3k[at]virginia.edu

Dear romac

Our server detects that your email storage has exceeded its limit and needs to be upgraded immediately

Click here now to upgrade your email storage

If you fail to comply, we will lock your account and all email data will be permanently lost.

Source: virginia.edu Email Administrator

Posted:

From: Support Inc
Sent: Sunday, April 12, 2020 1:49 PM
To: mst3k[at]virginia.edu
Subject: Account Notification !

PayPal secure ✔
Warning! Your Account Was Limited!
Hi Customer,

Your account has been limited temporarily in order to protect it. The account will continue to be limited until it is approved. Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again. The process does not take more than 5 minutes. Once connected, follow the steps to activate your account. We appreciate your understanding as we work to ensure security.

log In www.kolayflooring.com/wp-content/upgrade/New/>

[hxxp://i.imgur.com/VboGu5m.png?1]

1 Click on the Button Below

2Log In Enter email and password

Posted:

 

From: Professor at UVA  [email protected]>
Date: Wednesday, March 25, 2020 at 11:27 AM
To: "Typical User (mst3k)" [email protected]>
Subject: Quick Request
 
Send me your available text number that I can reach you on—
[The Professor’s signature]

The recipient (Typical User) replied:

to this email with their mobile phone number.
(NOTE:  Typical user's reply went to [email protected] – NOT to the actual professor’s @virginia.edu )  

The scammer then sent them this text:

Graphic of mobile phone text screen

Posted:

From: "virginia.edu"
Reply-To: THAI MEDICAL DEPARTMENT
Date: Thursday, April 9, 2020 at 7:33 AM
To: "mst3k[at]virginia.edu"
Subject: Message Notification: You have 6 new emails

 

Error! Filename not specified.
Email Quarantine

Dear mst3k[at]virginia.edu

virginia.edu has prevented the delivery of 6 new emails to your inbox as of 04/07/2020 12:04:39 a.m. because it identified these messages as spam. You can review these here and choose what happens to them. You can also get more information about quarantined messages by going to the Quarantine page in the Security and Compliance Center. You'll need to provide your work account to log in.

Emails will be deleted automatically after 14 days. You can change the frequency of these notifications within your email quarantine portal.
View Emails