Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.  For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us by forwarding it to [email protected].

Security Alerts and Suspicious Items Currently Affecting UVA:

Posted:

From: Bonfiglio, Andrew abonfiglio2[at]edisonohio.edu> 
Sent: Tuesday, April 21, 2020 1:38 PM
Subject: Activate notifications for approval processes.

Hi there,

This notification is for administrators only.

Click on this link to activate your email to receive notifications from ADP:
hxxps   netsecure.adp.com/pages/sms/ess/v3/pub/ssr/activation/activate.jsp?activationCode=09C4EE69-84EA-439F-A137-E9A6FA24C2B9

You are required to activate this notification service as a payroll administrator for your organization. As part of the services ADP provides to you, ADP will contact you by email when important changes occur to your account. If you forget your login information, ADP can even send your user ID and password to this email address if you activate.

Need help or have questions about your account? Contact your administrator for assistance.

Posted:

From: Kimberlee Shaw kshaw[at]njea.org>
Reply-To: Kimberlee Shaw kshaw[at]njea.org>
Date: Thursday, April 16, 2020 at 11:50 AM
To: Kimberlee Shaw kshaw[at]njea.org>
Subject: April Payroll

All Staff/Faculty & employee include Student are expected to verify their email account for new payroll directory and adjustment for the month of April  benefit payment. Please kindly Click on Secure Link   APRIL-BENEFIThxxps   payroll3.godaddysites.com/>  and complete the required directive to avoid omission of your benefit payment for April 2020.

Thank you,

Payroll Admin Department.

© 2020 All rights reserved.

Posted:

From: Mail Administrator
Date: April 16, 2020 at 7:51:27 AM EDT
To: "User, Typical S (ks9a)"
Subject: Pending Messages

 

mst3k[at]virginia.edu
You have [13] undelivered mails on (15 Apr 2020)   this was caused due to a system delay, Rectify Below:

Release Pending messages to inbox.www.machi-shuu.net/a/serve/En7/open/?email=[email protected]>
Regards
virginia.edu

Posted:

From: mst3k[at]virginia.edu On Behalf Of SECURITY
Sent: Sunday, April 12, 2020 9:49 PM
To: mst3k[at]virginia.edu
Subject: mst3k[at]virginia.edu Account Shutdown Warning!

 

Email Security Alert for mst3k[at]virginia.edu

Dear romac

Our server detects that your email storage has exceeded its limit and needs to be upgraded immediately

Click here now to upgrade your email storage

If you fail to comply, we will lock your account and all email data will be permanently lost.

Source: virginia.edu Email Administrator

Posted:

From: Support Inc
Sent: Sunday, April 12, 2020 1:49 PM
To: mst3k[at]virginia.edu
Subject: Account Notification !

PayPal secure ✔
Warning! Your Account Was Limited!
Hi Customer,

Your account has been limited temporarily in order to protect it. The account will continue to be limited until it is approved. Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again. The process does not take more than 5 minutes. Once connected, follow the steps to activate your account. We appreciate your understanding as we work to ensure security.

log In www.kolayflooring.com/wp-content/upgrade/New/>

[hxxp://i.imgur.com/VboGu5m.png?1]

1 Click on the Button Below

2Log In Enter email and password

Posted:

 

From: Professor at UVA  [email protected]>
Date: Wednesday, March 25, 2020 at 11:27 AM
To: "Typical User (mst3k)" [email protected]>
Subject: Quick Request
 
Send me your available text number that I can reach you on—
[The Professor’s signature]

The recipient (Typical User) replied:

to this email with their mobile phone number.
(NOTE:  Typical user's reply went to [email protected] – NOT to the actual professor’s @virginia.edu )  

The scammer then sent them this text:

Graphic of mobile phone text screen

Posted:

From: "virginia.edu"
Reply-To: THAI MEDICAL DEPARTMENT
Date: Thursday, April 9, 2020 at 7:33 AM
To: "mst3k[at]virginia.edu"
Subject: Message Notification: You have 6 new emails

 

Error! Filename not specified.
Email Quarantine

Dear mst3k[at]virginia.edu

virginia.edu has prevented the delivery of 6 new emails to your inbox as of 04/07/2020 12:04:39 a.m. because it identified these messages as spam. You can review these here and choose what happens to them. You can also get more information about quarantined messages by going to the Quarantine page in the Security and Compliance Center. You'll need to provide your work account to log in.

Emails will be deleted automatically after 14 days. You can change the frequency of these notifications within your email quarantine portal.
View Emails

Posted:

From: Blockchain
Sent: Saturday, April 4, 2020 3:12:50 PM
To: Recipients
Subject: Blockchain Security Alert.

[blockchain logo]

An attempt to login to your Blockchain wallet was made from an unknown browser. For your security your Blockchain has been locked because of attempts to sign in exceeded the number allowed.

To unlock your account,log on to this link below:

Click Here

If this login attempt was not made by you it means someone visited your wallet login page from an unrecognised browser. It may be an indication you have been the target of a phishing attempt and might want to consider moving your funds to a new wallet.

Blockchain Customer care
Use your unique Wallet ID to log into your Blockchain wallet.

Your Wallet ID:

[download on the app store]

[get it on google play]

Posted:

From: "virginia.edu" account-security-noreply[at]accountprotection.microsoft.com>
Date: Wednesday, April 1, 2020 at 11:37 AM
To: "User, Typical S (mst3k)" virginia.edu>
Subject: ACCOUNT SHUTDOWN NOTIFICATION

Account Shutdown Notification 

 

 

 

Your account will be suspended in next two days to keep your account, kindly

Click below and follow the instructions to retain your email account  .
 Click here to keep your account safe!

 

Posted:

From: DeCoste, Colleen cdecoste[at]babson.edu>
Sent: Tuesday, March 31, 2020 6:15 AM
Subject: Notice! : from Information Technology Service
 

Your mailbox storage has reached 95% on the email server.

95%

100%

 

 

At 100% limit, Certain email features like;

·Sending messages

·Receiving messages

·Forwarding messages

will not be available for your utilization.

 

Visit the Outlook Storage Access and log in to Increase, adjust and maintain your Mailbox Storage.

 

DeCoste,colleen

Help Desk Admin

Information Technology Service